CVE-2025-26136

概要

参考情報

• gist.github.com/xiadmin6/6d664692d31a04eb59096a488b9f3712 · Third Party Advisory

mysiteforme のその他の脆弱性

• CVE-2024-57767高 8.6MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.
• CVE-2024-57766緊急 9.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.
• CVE-2024-57765高 7.5MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.
• CVE-2024-57764緊急 9.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.
• CVE-2024-57763緊急 9.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.