CVE-2022-42744

概要

参考情報

• candidats.net · Product
• fluidattacks.com/advisories/mohawke · Exploit

candidats のその他の脆弱性

• CVE-2022-42749中 6.1CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is po…
• CVE-2022-42748中 6.1CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. T…
• CVE-2022-42747中 6.1CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This is …
• CVE-2022-42746中 6.1CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' resource, allows an external attacker to steal the cookie of arbitrary users. This …
• CVE-2022-42751高 8.8CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffe…