CVE-2020-24036

Mô tả

Tham khảo

• packetstormsecurity.com/files/161764/ForkCMS-PHP-Object-Injection.html
• seclists.org/fulldisclosure/2021/Mar/31 · Exploit
• tech.feedyourhead.at/content/ForkCMS-PHP-Object-Injection-CVE-2020-24036 · Exploit
• ait.ac.at/themen/cyber-security/pentesting/security-advisories/ait-sa-20210215-04 · Exploit

Lỗ hổng khác của fork cms

• CVE-2022-35590TRUNG BÌNH 4.8A cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "end_date" Parameter
• CVE-2022-35589TRUNG BÌNH 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_time" Paramete…
• CVE-2022-35587TRUNG BÌNH 4.8A cross-site scripting (XSS) issue in the Fork version 5.9.3 allows remote attackers to inject JavaScript via the "publish_on_date" Paramete…
• CVE-2022-35585TRUNG BÌNH 4.8A stored cross-site scripting (XSS) issue in the ForkCMS version 5.9.3 allows remote attackers to inject JavaScript via the "start_date" Par…
• CVE-2022-1064CAO 8.8SQL injection through marking blog comments on bulk as spam in GitHub repository forkcms/forkcms prior to 5.11.1.