CVE-2022-25228

概要

参考情報

• candidats.net/forums · Product
• fluidattacks.com/advisories/jackson · Exploit

candidats のその他の脆弱性

• CVE-2022-42749中 6.1CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is po…
• CVE-2022-42748中 6.1CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. T…
• CVE-2022-42747中 6.1CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is …
• CVE-2022-42746中 6.1CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This …
• CVE-2022-42744緊急 9.8CandidATS version 3.0.0 allows an external attacker to perform CRUD operations on the application databases. This is possible because the ap…