CVE-2020-25445

概要

参考情報

• medium.com/%40singh.satyam158/vulnerabilities-in-booking-core-1-7-d85d1dfae44e

booking core のその他の脆弱性

• CVE-2021-37333緊急 9.8Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/chang…
• CVE-2021-37331中 5.3Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or …
• CVE-2021-37330中 5.4Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be ex…
• CVE-2020-27379中 6.5Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF token is not being v…
• CVE-2020-25444中 5.4Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) "About Yourself” section u…