CVE-2024-57547

概要

参考情報

• gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb · Third Party Advisory
• h4ckr4v3n/cmsimple5.16_research · Exploit

cmsimple のその他の脆弱性

• CVE-2021-47735高 8.8CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into…
• CVE-2021-47734高 7.8CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and e…
• CVE-2021-47733中 6.1CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding…
• CVE-2021-47732中 6.1CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject ma…
• CVE-2024-58280高 8.8CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload mal…