CVE-2018-15844

Mô tả

Tham khảo

• Vict00r/poc · Third Party Advisory
• exploit-db.com/exploits/45314 · Third Party Advisory

Lỗ hổng khác của damicms

• CVE-2020-21236CAO 8.8A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts …
• CVE-2020-18458CAO 8.0Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
• CVE-2020-18451TRUNG BÌNH 4.8Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
• CVE-2018-14831TRUNG BÌNH 4.9An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a craf…
• CVE-2018-20571CAO 7.5DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=T…