CVE-2018-12065

Mô tả

Tham khảo

• Creatiwity/wityCMS · Third Party Advisory
• xkklq.coding.me/2018/06/07/wityCMS-LFI · Exploit

Lỗ hổng khác của witycms

• CVE-2022-29725CAO 8.8An arbitrary file upload in the image upload component of wityCMS v0.6.2 allows attackers to execute arbitrary code via a crafted PHP file.
• CVE-2018-16251TRUNG BÌNH 4.3A "search for user discovery" injection issue exists in Creatiwity wityCMS 0.6.2 via the "Utilisateur" menu. No input parameters are filtere…
• CVE-2018-16250TRUNG BÌNH 5.4The "utilisateur" menu in Creatiwity wityCMS 0.6.2 modifies the presence of XSS at two input points for user information, with the "first na…
• CVE-2018-16776TRUNG BÌNH 4.8wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
• CVE-2018-14029CAO 8.8CSRF vulnerability in admin/user/edit in Creatiwity wityCMS 0.6.2 allows an attacker to take over a user account, as demonstrated by modifyi…