CVE-2018-13031

Description

References

• AutismJH/damicms
• cnblogs.com/v1vvwv/p/9248562.html · Exploit
• exploit-db.com/exploits/44960 · Exploit

damicms의 다른 취약점

• CVE-2020-21236높음 8.8A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts …
• CVE-2020-18458높음 8.0Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
• CVE-2020-18451보통 4.8Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
• CVE-2018-14831보통 4.9An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a craf…
• CVE-2018-20571높음 7.5DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=T…