CVE-2018-14389

Description

References

• joyplus/joyplus-cms · Exploit

joyplus-cms 的其他漏洞

• CVE-2020-20636高危 7.5SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of th…
• CVE-2020-22124高危 7.5A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
• CVE-2019-17175高危 7.5joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
• CVE-2018-14500中危 6.1joyplus-cms 1.6.0 has XSS via the manager/collect/collect_vod_zhuiju.php keyword parameter.
• CVE-2018-14388中危 5.4joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.