CVE-2022-41472

概要

参考情報

• xxhzz1/74cmsSE-Storage-cross-site-scripting-vulnerability · Exploit

74cmsse のその他の脆弱性

• CVE-2022-42154緊急 9.8An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary cod…
• CVE-2022-41471中 6.574cmsSE v3.12.0 allows authenticated attackers with low-level privileges to arbitrarily change the rights and credentials of the Super Admin…
• CVE-2022-33097高 7.574cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/campus/campus_job.
• CVE-2022-33096高 7.574cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/resume/index.
• CVE-2022-33095高 7.574cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/jobfairol/resumelist.