croogo Host header injection

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-29643 · ADVISORY
• croogo/croogo · WEB
• croogo/croogo · PACKAGE
• medium.com/@christbowel6/cve-2024-29643-host-header-injection-in-croogo-v3-0-2-0aded525f574 · WEB

croogo/croogo의 다른 취약점

• CVE-2024-42718보통 6.5A path traversal vulnerability in Croogo CMS 4.0.7 allows remote attackers to read arbitrary files via a specially crafted path in the 'edit…
• CVE-2021-44673높음 8.8A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a w…
• CVE-2019-20789보통 4.8Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.
• CVE-2019-7173보통 4.8A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /a…
• CVE-2019-7171보통 4.8A stored-self XSS exists in Croogo through v3.0.5, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /a…