CVE-2023-53925

概要

参考情報

• web.archive.org/web/20230314183734/https://en.ulicms.de · Product
• exploit-db.com/exploits/51435 · Exploit
• vulncheck.com/advisories/ulicms-stored-cross-site-scripting-via-svg-file-upload · Third Party Advisory

ulicms のその他の脆弱性

• CVE-2023-53924高 8.8UliCMS 2023.1-sniffing-vicuna contains a remote code execution vulnerability that allows authenticated attackers to upload PHP files with .p…
• CVE-2023-53923緊急 9.8UliCMS 2023.1 contains a privilege escalation vulnerability that allows unauthenticated attackers to create administrative accounts through …
• CVE-2023-53914緊急 9.8UliCMS 2023.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through mass assig…
• CVE-2020-12704中 6.1UliCMS before 2020.2 has PageController stored XSS.
• CVE-2020-12703中 6.1UliCMS before 2020.2 has XSS during PackageController uninstall.