CVE-2025-63248

概要

参考情報

• gitee.com/wkeyuan/DWSurvey · Product
• Chen1-Boop/CVE · Exploit

dwsurvey のその他の脆弱性

• CVE-2023-40980緊急 9.8File Upload vulnerability in DWSurvey DWSurvey-OSS v.3.2.0 and before allows a remote attacker to execute arbitrary code via the saveimage m…
• CVE-2020-20070中 6.1Cross Site Scripting vulnerability found in wkeyuan DWSurvey 1.0 allows a remote attacker to execute arbitrary code via thequltemld paramete…
• CVE-2021-39384緊急 9.8DWSurvey v3.2.0 was discovered to contain an arbitrary file write vulnerability via the component /utils/ToHtmlServlet.java.
• CVE-2021-39383緊急 9.8DWSurvey v3.2.0 was discovered to contain a remote command execution (RCE) vulnerability via the component /sysuser/SysPropertyAction.java.
• CVE-2019-15095中 6.1DWSurvey through 2019-07-22 has reflected XSS via the design/qu-multi-fillblank!answers.action surveyId parameter.