CVE-2020-26565

Mô tả

Tham khảo

• packetstormsecurity.com/files/163708/ObjectPlanet-Opinio-7.13-Expression-Language-Injection.html · Exploit
• objectplanet.com/opinio/changelog.html · Release Notes

Lỗ hổng khác của opinio

• CVE-2025-13873TRUNG BÌNH 5.4Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to…
• CVE-2025-13872NGHIÊM TRỌNG 9.1Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allow…
• CVE-2025-13871CAO 8.8Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on beh…
• CVE-2023-4472NGHIÊM TRỌNG 9.8Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed…
• CVE-2020-26806CAO 8.8admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution…