CVE-2022-38089

概要

参考情報

• exment.net/docs · Patch
• exment.net/docs · Mitigation
• jvn.jp/en/jp/JVN46239102/index.html · Third Party Advisory

exment のその他の脆弱性

• CVE-2024-47793中 5.4Stored cross-site scripting vulnerability exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. When accessing the edit screen…
• CVE-2024-46897低 3.8Incorrect permission assignment for critical resource issue exists in Exment v6.1.4 and earlier and Exment v5.0.11 and earlier. A logged-in …
• CVE-2022-38080中 5.4Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and ea…
• CVE-2022-37333高 8.8SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7)…
• CVE-2020-5620中 5.4Cross-site scripting vulnerability in Exment prior to v3.6.0 allows remote authenticated attackers to inject arbitrary script or HTML via a …