CVE-2014-9599

Description

References

• b2evolution.net/downloads/5-2-1-stable · Patch
• packetstormsecurity.com/files/129940/CMS-b2evolution-5.2.0-Cross-Site-Scripting.html · Exploit
• seclists.org/fulldisclosure/2015/Jan/48 · Exploit
• sroesemann.blogspot.de/2014/12/sroeadv-2014-09.html · Exploit
• sroesemann.blogspot.de/2015/01/report-for-advisory-sroeadv-2014-09.html · Exploit
• securityfocus.com/bid/72052
• exchange.xforce.ibmcloud.com/vulnerabilities/99891
• twitter.com/SecLists/status/554937224366546944

b2evolution 的其他漏洞

• CVE-2022-30935严重 9.1An authorization bypass in b2evolution allows remote, unauthenticated attackers to predict password reset tokens for any user through the us…
• CVE-2021-28242高危 8.8SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by…
• CVE-2020-22841中危 4.8Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name…
• CVE-2020-22840中危 6.1Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker…
• CVE-2016-8901严重 9.8b2evolution 6.7.6 suffer from an Object Injection vulnerability in /htsrv/call_plugin.php.