CVE-2020-27406

概要

参考情報

• exploit-db.com/exploits/48865 · Exploit

dynpg のその他の脆弱性

• CVE-2021-27531中 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "query" parameter.
• CVE-2021-27530中 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php.
• CVE-2021-27529中 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "limit" parameter.
• CVE-2021-27528中 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "refID" parameter.
• CVE-2021-27527中 4.8A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the "valueID" parameter.