CVE-2023-36220

概要

参考情報

• packetstormsecurity.com/files/172967/Textpattern-CMS-4.8.8-Command-Injection.html · Exploit
• release-demo.textpattern.co · Product
• textpattern.com · Product
• textpattern.com/file_download/118/textpattern-4.8.8.zip · Release Notes

textpattern のその他の脆弱性

• CVE-2026-30452中 6.5Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with l…
• CVE-2026-32986中 6.1Textpattern CMS version 4.9.0 contains a second-order cross-site scripting vulnerability that allows attackers to inject malicious scripts b…
• CVE-2023-53911中 5.4Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to i…
• CVE-2023-50038高 8.8There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.
• CVE-2023-24269高 8.8An arbitrary file upload vulnerability in the plugin upload function of Textpattern v4.8.8 allows attackers to execute arbitrary code via a …