CVE-2020-5306

概要

参考情報

• codologic.com/forum/index.php · Vendor Advisory
• vyshnavvizz.blogspot.com/2020/01/stored-cross-site-scripting-in.html · Exploit
• exploit-db.com/exploits/47886 · Exploit

codoforum のその他の脆弱性

• CVE-2020-22540中 5.4Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive informati…
• CVE-2020-22539高 7.2An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploadi…
• CVE-2022-31854高 7.2Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
• CVE-2020-25879中 5.4A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execut…
• CVE-2020-25876中 5.4A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbit…