CVE-2023-53914

概要

参考情報

• web.archive.org/web/20230314183734/https://en.ulicms.de · Product
• exploit-db.com/exploits/51486 · Exploit
• vulncheck.com/advisories/ulicms-authentication-bypass-via-mass-assignment-vulnerability · Third Party Advisory

ulicms のその他の脆弱性

• CVE-2023-53925中 6.1UliCMS 2023.1 contains a stored cross-site scripting vulnerability that allows attackers to upload malicious SVG files with embedded JavaScr…
• CVE-2023-53924高 8.8UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .p…
• CVE-2023-53923緊急 9.8UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through …
• CVE-2020-12704中 6.1UliCMS before 2020.2 has PageController stored XSS.
• CVE-2020-12703中 6.1UliCMS before 2020.2 has XSS during PackageController uninstall.