CVE-2023-53972

概要

参考情報

• sourceforge.net/projects/webtareas · Product
• exploit-db.com/exploits/51087 · Exploit
• vulncheck.com/advisories/webtareas-unauthenticated-sql-injection-via-session-cookie-parameter · Exploit

webtareas のその他の脆弱性

• CVE-2023-53971高 8.8WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo uplo…
• CVE-2022-44962中 5.4webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /calendar/viewcalendar.php. This vulne…
• CVE-2022-44961中 5.4webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /forums/editforum.php. This vulnerabil…
• CVE-2022-44960中 5.4webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /general/search.php?searchtype=simple.…
• CVE-2022-44959中 5.4webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /meetings/listmeetings.php. This vulne…