CVE-2014-9242

Mô tả

Tham khảo

• packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html · Exploit
• seclists.org/fulldisclosure/2014/Nov/44 · Exploit

Lỗ hổng khác của websitebaker

• CVE-2021-47788CAO 8.8WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to exe…
• CVE-2023-53953TRUNG BÌNH 5.4WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when cr…
• CVE-2023-53903TRUNG BÌNH 5.4WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with …
• CVE-2023-53902TRUNG BÌNH 6.5WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulati…
• CVE-2020-25990NGHIÊM TRỌNG 9.8WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue cou…