CVE-2020-37072

Mô tả

Tham khảo

• VictorAlagwu/CMSsite · Product
• exploit-db.com/exploits/48484 · Exploit
• vulncheck.com/advisories/victor-cms-commentauthor-persistent-cross-site-scripting · Broken Link

Lỗ hổng khác của victor cms

• CVE-2020-37076CAO 8.2Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php that allows remote attackers to manipulate…
• CVE-2020-37073CAO 8.8Victor CMS 1.0 contains an authenticated file upload vulnerability that allows administrators to upload PHP files with arbitrary content thr…
• CVE-2020-36942CAO 8.8Victor CMS 1.0 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the profile image …
• CVE-2020-23966NGHIÊM TRỌNG 9.8SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafte…
• CVE-2020-35597CAO 8.8Victor CMS 1.0 is vulnerable to SQL injection via c_id parameter of admin_edit_comment.php, p_id parameter of admin_edit_post.php, u_id para…