CVE-2018-18488

Mô tả

Tham khảo

• sunu11.com/2018/10/18/glxcms · Exploit

Lỗ hổng khác của gxlcms

• CVE-2020-20975NGHIÊM TRỌNG 9.8In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter.
• CVE-2018-18487CAO 7.5In \lib\admin\action\dataaction.class.php in Gxlcms v2.0, the database backup filename generation uses mt_rand() unsafely, resulting in pred…
• CVE-2018-16655TRUNG BÌNH 6.1Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php.
• CVE-2018-16437TRUNG BÌNH 4.9Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator.
• CVE-2018-16436CAO 7.2Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator.