CVE-2020-19888

Mô tả

Tham khảo

• fragrant10/cve · Exploit

Lỗ hổng khác của dbhcms

• CVE-2020-19891CAO 7.2DBHcms v1.2.0 has an Arbitrary file write vulnerability in dbhcms\mod\mod.editor.php $_POST['updatefile'] is filename and $_POST['tinymce_co…
• CVE-2020-19890TRUNG BÌNH 4.9DBHcms v1.2.0 has an Arbitrary file read vulnerability in dbhcms\mod\mod.editor.php $_GET['file'] is filename,and as there is no filter func…
• CVE-2020-19889CAO 8.8DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for index.php?dbhcms_pid=-70 can add a user.
• CVE-2020-19887TRUNG BÌNH 4.8DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST['pageparam_insert_description']' variable …
• CVE-2020-19886CAO 8.1DBHcms v1.2.0 has no CSRF protection mechanism,as demonstrated by CSRF for an /index.php?dbhcms_pid=-80&deletemenu=9 can delete any menu.