CVE-2018-19194

Mô tả

Tham khảo

• AvaterXXX/XiaoCms · Exploit

Lỗ hổng khác của xiaocms

• CVE-2019-6127CAO 7.2An issue was discovered in XiaoCms 20141229. It allows admin/index.php?c=database table[] SQL injection. This can be used for PHP code execu…
• CVE-2018-19197TRUNG BÌNH 4.9An issue was discovered in XiaoCms 20141229. admin\controller\database.php allows arbitrary directory deletion via admin/index.php?c=databas…
• CVE-2018-19196NGHIÊM TRỌNG 9.8An issue was discovered in XiaoCms 20141229. It allows remote attackers to execute arbitrary code by using the type parameter to bypass the …
• CVE-2018-19195TRUNG BÌNH 6.1An issue was discovered in XiaoCms 20141229. There is XSS related to the template\default\show_product.html file.
• CVE-2018-19193TRUNG BÌNH 6.1An issue was discovered in XiaoCms 20141229. There is XSS via the largest input box on the "New news" screen.