CVE-2022-40361

概要

参考情報

• elitecrm.co · Product
• hazemhussien99.wordpress.com/2024/01/07/cve-2022-40361-disclosure · Third Party Advisory

elite cms のその他の脆弱性

• CVE-2023-42331高 8.8A file upload vulnerability in EliteCMS v1.01 allows a remote attacker to execute arbitrary code via the manage_uploads.php component.
• CVE-2022-30816緊急 9.8elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.
• CVE-2022-30815緊急 9.8elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=
• CVE-2022-30814緊急 9.8elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.
• CVE-2022-30813緊急 9.8elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.