CVE-2023-27178

概要

参考情報

• gist.github.com/Hadi999/4bc173bfb802c229b9bb397fa906847b · Third Party Advisory
• nvd.nist.gov/vuln/detail/CVE-2022-40797 · Third Party Advisory
• salsa.debian.org/php-team/php/-/blob/dc253886b5b2e9bc8d9e36db787abb083a667fd8/debian/php-cgi.conf · Product
• gdidees.eu/cms-1-0.html · Release Notes

gdidees cms のその他の脆弱性

• CVE-2024-46101緊急 9.8GDidees CMS <= v3.9.1 has a file upload vulnerability.
• CVE-2023-44758中 5.4GDidees CMS 3.0 is affected by a Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payl…
• CVE-2023-27179高 7.5GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdow…
• CVE-2023-27180高 7.5GDidees CMS v3.9.1 was discovered to contain a source code disclosure vulnerability by the backup feature which is accessible via /_admin/ba…