CVE-2018-19906

Description

References

• security-breachlock/CVE-2018-19906 · Exploit
• smiffy6969/razorCMS · Exploit

Mais vulnerabilidades de razorcms

• CVE-2018-19905MÉDIO 5.4HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.
• CVE-2018-17986ALTO 8.8rars/user/data in razorCMS 3.4.8 allows CSRF for changing the password of an admin user.
• CVE-2018-16727MÉDIO 5.4razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.
• CVE-2018-16726MÉDIO 5.4razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.
• CVE-2012-6038MÉDIO 6.5admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which a…