CVE-2022-31854

概要

参考情報

• packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html · Exploit
• codoforum.com · Vendor Advisory
• Vikaran101/CVE-2022-31854 · Exploit
• vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc · Exploit

codoforum のその他の脆弱性

• CVE-2020-22540中 5.4Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive informati…
• CVE-2020-22539高 7.2An arbitrary file upload vulnerability in the Add Category function of Codoforum v4.9 allows attackers to execute arbitrary code via uploadi…
• CVE-2020-25879中 5.4A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execut…
• CVE-2020-25876中 5.4A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbit…
• CVE-2020-25875中 5.4A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arb…