CVE-2024-24399

概要

参考情報

• capture0x/leptoncms
• capture0x/leptoncms · Exploit
• packetstormsecurity.com/files/176647/Lepton-CMS-7.0.0-Remote-Code-Execution.html
• exploit-db.com/exploits/51949

leptoncms のその他の脆弱性

• CVE-2025-56704高 8.8LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files…
• CVE-2024-29514高 8.8File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP fi…
• CVE-2024-29515高 8.8File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP fi…
• CVE-2024-24520高 7.8An issue in Lepton CMS v.7.0.0 allows a local attacker to execute arbitrary code via the upgrade.php file in the languages place.
• CVE-2020-24872中 6.1Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitra…