CVE-2020-9381

概要

参考情報

• saddean/research · Exploit
• totaljs/cms commit 2a26c4c · Patch

total.js cms のその他の脆弱性

• CVE-2019-15955中 6.5An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random va…
• CVE-2019-15954緊急 9.9An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (…
• CVE-2019-15953高 8.8An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not …
• CVE-2019-15952高 8.8An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to …
• CVE-2019-10260中 6.1Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).