CVE-2018-12101

Mô tả

Tham khảo

• ClipperCMS/ClipperCMS · Exploit
• ClipperCMS/ClipperCMS · Exploit
• ClipperCMS/ClipperCMS · Exploit

Lỗ hổng khác của clippercms

• CVE-2022-41497NGHIÊM TRỌNG 9.8ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php.
• CVE-2022-41495NGHIÊM TRỌNG 9.8ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php.
• CVE-2018-19424CAO 7.2ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files.
• CVE-2018-19135CAO 8.8ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform …
• CVE-2018-13998TRUNG BÌNH 4.8ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.