CVE-2018-20528

Description

References

• hacker.feiyulive.com/wordpress/index.php/116 · Permissions Required
• exchange.xforce.ibmcloud.com/vulnerabilities/154855 · Third Party Advisory

jeecms의 다른 취약점

• CVE-2020-20799보통 5.4JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via …
• CVE-2018-19545높음 8.8JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.
• CVE-2018-19544보통 6.5JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.
• CVE-2018-18952보통 4.8JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.