CVE-2023-53884

概要

参考情報

• exploit-db.com/exploits/51662 · Exploit
• vulncheck.com/advisories/webedition-cms-v-stored-cross-site-scripting-via-svg-upload · Third Party Advisory
• webedition.org · Product

webedition cms のその他の脆弱性

• CVE-2023-53883高 7.2Webedition CMS v2.9.8.8 contains a remote code execution vulnerability that allows authenticated attackers to inject system commands through…
• CVE-2024-28418中 6.5Webedition CMS 9.2.2.0 has a File upload vulnerability via /webEdition/we_cmd.php
• CVE-2024-28417中 6.3Webedition CMS 9.2.2.0 has a Stored XSS vulnerability via /webEdition/we_cmd.php.
• CVE-2014-2302緊急 9.8The installer script in webEdition CMS before 6.2.7-s1 and 6.3.x before 6.3.8-s1 allows remote attackers to conduct PHP Object Injection att…
• CVE-2014-5258中 4.0Directory traversal vulnerability in showTempFile.php in webEdition CMS before 6.3.9.0 Beta allows remote authenticated users to read arbitr…