CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ(NVD、OSV、GitHub)を、CVSS、EPSS、実際に悪用されているか(CISA KEV)とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 19/05/2023 |
| CVE-2023-27235 | 高7.2 | An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file. | 15/03/2023 |
| CVE-2023-27234 | 中6.5 | A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application. | 15/03/2023 |
| CVE-2021-36484 | 緊急9.8 | SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page. | 03/02/2023 |
| CVE-2022-45278 | 高8.8 | Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins/Fields/get_fields.html component. | 23/11/2022 |
| CVE-2022-44140 | 高8.8 | Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member/memberedit.html component. | 23/11/2022 |
| CVE-2021-29334 | 高8.8 | An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin account via index, /admin.php/Admin/adminadd.html | 23/11/2022 |
| CVE-2022-36578 | 緊急9.8 | jizhicms v2.3.1 has SQL injection in the background. | 19/08/2022 |
| CVE-2022-36577 | 高8.8 | An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin. | 19/08/2022 |
| CVE-2022-31393 | 緊急9.1 | Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php. | 09/06/2022 |
| CVE-2022-31390 | 緊急9.1 | Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php. | 09/06/2022 |
| CVE-2022-27429 | 緊急9.8 | Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html. | 25/04/2022 |
| CVE-2020-21228 | 中6.1 | JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie. | 01/10/2021 |
| CVE-2020-21483 | 高7.2 | An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file. | 15/09/2021 |
| CVE-2020-23644 | 中6.1 | XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg={XSS] to Home/c/ErrorController.php. | 11/01/2021 |
| CVE-2020-23643 | 中6.1 | XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php. | 11/01/2021 |
| CVE-2019-17593 | 高8.8 | JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator. | 14/10/2019 |