CVE-2020-25987

概要

参考情報

• packetstormsecurity.com/files/159430/MonoCMS-Blog-1.0-File-Deletion-CSRF-Hardcoded-Credentials.html · Exploit
• monocms.com/download · Product

monocms のその他の脆弱性

• CVE-2024-10928中 6.1A vulnerability was found in MonoCMS up to 20240528. It has been declared as problematic. Affected by this vulnerability is an unknown funct…
• CVE-2024-10927中 6.1A vulnerability was found in MonoCMS up to 20240528. It has been classified as problematic. Affected is an unknown function of the file /mon…
• CVE-2020-28672高 7.2MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution. At monofiles/category.php:27, use…
• CVE-2020-25985高 8.1MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files on and off the webserver (php files can be…
• CVE-2020-25986中 6.5A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user.