CVE-2020-9381

Mô tả

Tham khảo

• saddean/research · Exploit
• totaljs/cms commit 2a26c4c · Patch

Lỗ hổng khác của total.js cms

• CVE-2019-15955TRUNG BÌNH 6.5An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple transformation of a cookie to obtain the random va…
• CVE-2019-15954NGHIÊM TRỌNG 9.9An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (…
• CVE-2019-15953CAO 8.8An issue was discovered in Total.js CMS 12.0.0. An authenticated user with limited privileges can get access to a resource that they do not …
• CVE-2019-15952CAO 8.8An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to …
• CVE-2019-10260TRUNG BÌNH 6.1Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).