CVE-2021-43736

Description

References

• arterli/CmsWing · Exploit

Mais vulnerabilidades de cmswing

• CVE-2021-43735CRÍTICO 9.8CmsWing 1.3.7 is affected by a SQLi vulnerability via parameter: behavior rule.
• CVE-2020-24993MÉDIO 5.4There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the articl…
• CVE-2020-24992MÉDIO 5.4There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses …
• CVE-2020-20296CRÍTICO 9.8An issue was found in CMSWing project version 1.3.8, Because the rechargeAction function does not check the balance parameter, malicious par…
• CVE-2020-20295CRÍTICO 9.8An issue was found in CMSWing project version 1.3.8. Because the updateAction function does not check the detail parameter, malicious parame…