CVE-2020-7051

概要

参考情報

• codologic.com/forum/index.php · Vendor Advisory
• linkedin.com/posts/polina-voronina-896819b5_discovered-by-polina-voronina-jan-15-activity-6634436086540054528-dDgg · Third Party Advisory

codoforum のその他の脆弱性

• CVE-2020-22540中 5.4Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive informati…
• CVE-2020-22539高 7.2An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploadi…
• CVE-2022-31854高 7.2Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
• CVE-2020-25879中 5.4A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execut…
• CVE-2020-25876中 5.4A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbit…