CVE-2018-10073

Description

References

• joyplus/joyplus-cms · Exploit

joyplus-cms의 다른 취약점

• CVE-2020-20636높음 7.5SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of th…
• CVE-2020-22124높음 7.5A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
• CVE-2019-17175높음 7.5joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
• CVE-2018-14500보통 6.1joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.
• CVE-2018-14389심각 9.8joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.