CVE-2020-25790

概要

参考情報

• packetstormsecurity.com/files/159503/Typesetter-CMS-5.1-Remote-Code-Execution.html · Third Party Advisory
• packetstormsecurity.com/files/159615/Typesetter-CMS-5.1-Remote-Code-Execution.html · Exploit
• seclists.org/fulldisclosure/2020/Oct/11 · Mailing List
• Typesetter/Typesetter · Third Party Advisory

typesetter のその他の脆弱性

• CVE-2025-71166中 5.4Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface…
• CVE-2025-71165中 5.4Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the administrative interface…
• CVE-2025-71164中 5.4Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting (XSS) vulnerability in the Editing component. The i…
• CVE-2022-25523高 8.8TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request.
• CVE-2020-19511中 6.1Cross Site Scriptiong vulnerability in Typesetter 5.1 via the !1) className and !2) Description fields in index.php/Admin/Classes,