CVE-2020-20945

Mô tả

Tham khảo

• qibosoft.com/downloadProduction.htm · Vendor Advisory
• blog.csdn.net/he_and/article/details/102698171 · Exploit

Lỗ hổng khác của qibosoft

• CVE-2020-20808TRUNG BÌNH 6.1Cross Site Scripting vulnerability in Qibosoft qibosoft v.7 and before allows a remote attacker to execute arbitrary code via the eindtijd a…
• CVE-2020-20946TRUNG BÌNH 5.4Qibosoft v7 contains a stored cross-site scripting (XSS) vulnerability in the component /admin/index.php?lfj=friendlink&action=add.
• CVE-2020-20944NGHIÊM TRỌNG 9.1An issue in /admin/index.php?lfj=mysql&action=del of Qibosoft v7 allows attackers to arbitrarily delete files.
• CVE-2020-20943TRUNG BÌNH 4.3A Cross-Site Request Forgery (CSRF) in /member/post.php?job=postnew&step=post of Qibosoft v7 allows attackers to force victim users into arb…
• CVE-2021-27811CAO 7.2A code injection vulnerability has been discovered in the Upgrade function of QibosoftX1 v1.0. An attacker is able execute arbitrary PHP cod…