CVE-2021-28242

Mô tả

Tham khảo

• packetstormsecurity.com/files/162489/b2evolution-7-2-2-SQL-Injection.html · Exploit
• deadsh0t.medium.com/authenticated-boolean-based-blind-error-based-sql-injection-b752225f0644 · Exploit
• b2evolution/b2evolution · Issue Tracking

Lỗ hổng khác của b2evolution

• CVE-2022-30935NGHIÊM TRỌNG 9.1An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the us…
• CVE-2020-22841TRUNG BÌNH 4.8Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name…
• CVE-2020-22840TRUNG BÌNH 6.1Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker…
• CVE-2016-8901NGHIÊM TRỌNG 9.8b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.
• CVE-2017-1000423NGHIÊM TRỌNG 9.8b2evolution version 6.6.0 - 6.8.10 is vulnerable to input validation (backslash and single quote escape) in basic install functionality resu…