CVE-2023-26952

概要

参考情報

• keheying/onekeyadmin · Exploit

onekeyadmin のその他の脆弱性

• CVE-2023-26951中 5.4onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Member List module.
• CVE-2023-26957緊急 9.1onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins.
• CVE-2023-26948高 7.5onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download.
• CVE-2023-26956高 7.5onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code.
• CVE-2023-26950中 5.4onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Cate…