CVE-2020-21236

Mô tả

Tham khảo

• wind-cyber/DamiCMS-v6.0.0-have-csrf-and-xss-Vulnerabilities- · Exploit

Lỗ hổng khác của damicms

• CVE-2020-18458CAO 8.0Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.
• CVE-2020-18451TRUNG BÌNH 4.8Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
• CVE-2018-14831TRUNG BÌNH 4.9An arbitrary file read vulnerability in DamiCMS v6.0.0 allows remote authenticated administrators to read any files in the server via a craf…
• CVE-2018-20571CAO 7.5DamiCMS 6.0.1 allows remote attackers to read arbitrary files via a crafted admin.php?s=Tpl/Add/id request, as demonstrated by admin.php?s=T…
• CVE-2018-16331CAO 8.8admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password.