CVE-2023-40980

概要

参考情報

• wkeyuan/DWSurvey · Exploit

dwsurvey のその他の脆弱性

• CVE-2025-63248高 7.5DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of anot…
• CVE-2020-20070中 6.1Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld paramete…
• CVE-2021-39384緊急 9.8DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.
• CVE-2021-39383緊急 9.8DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.
• CVE-2019-15095中 6.1DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.