CVE-2020-19159

Description

References

• TL-swallow/swallow · Exploit

laiketui의 다른 취약점

• CVE-2021-40956높음 7.5LaiKetui v3.5.0 has SQL injection in the background through the menu management function, and sensitive data can be obtained.
• CVE-2021-40955높음 7.2SQL injection exists in LaiKetui v3.5.0 the background administrator list.
• CVE-2021-40954심각 9.8Laiketui 3.5.0 is affected by an arbitrary file upload vulnerability that can allow an attacker to execute arbitrary code.
• CVE-2021-34129높음 8.1LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall t…
• CVE-2021-34128높음 8.8LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP a…