CVE-2023-37756

概要

参考情報

• leekenghwa/CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below · Exploit
• medium.com/%40ray.999/idoit-pro-v25-and-below-weak-password-add-on-upload-to-rce-cve-2023-37756-fa1b18433ca3

i-doit のその他の脆弱性

• CVE-2019-25582中 6.5i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipu…
• CVE-2019-25581高 7.5i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting…
• CVE-2024-8750中 6.1Cross-site Scripting (XSS) vulnerability in idoit pro version 28. This vulnerability allows an attacker to retrieve session details of an au…
• CVE-2024-8749高 7.5SQL injection vulnerability in idoit pro version 28. This vulnerability could allow an attacker to send a specially crafted query to the ID …
• CVE-2023-46003中 5.4I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.