CVE-2022-29309

Description

References

• wangl1989/mysiteforme · Exploit

mysiteforme의 다른 취약점

• CVE-2025-26136심각 9.8A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.
• CVE-2024-57767높음 8.6MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.
• CVE-2024-57766심각 9.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.
• CVE-2024-57765높음 7.5MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.
• CVE-2024-57764심각 9.1MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.