CVE-2022-27436

概要

参考情報

• drive.google.com/file/d/1pXCq3E-OlczLs5Obh_qkJlJ-7kPkluEK/view · Exploit
• D4rkP0w4r/Full-Ecommece-Website-Add_User-Stored-XSS-POC · Exploit
• hackmd.io/MUKHOiNkT2u9vi2u9CtrYA · Exploit

ecommerce-website のその他の脆弱性

• CVE-2022-45990中 6.1A cross-site scripting (XSS) vulnerability in the component /signup_script.php of Ecommerce-Website v1.0 allows attackers to execute arbitra…
• CVE-2022-27357緊急 9.8Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customer_register.php. This vulnerability allows …
• CVE-2022-27346高 8.8Ecommece-Website v1.1.0 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?slides. This vulnerability all…
• CVE-2022-27435高 8.8An unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the…