CVE-2018-14500

Description

References

• joyplus/joyplus-cms · Exploit

joyplus-cms 的其他漏洞

• CVE-2020-20636高危 7.5SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of th…
• CVE-2020-22124高危 7.5A vulnerability in the \inc\config.php component of joyplus-cms v1.6 allows attackers to access sensitive information.
• CVE-2019-17175高危 7.5joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
• CVE-2018-14389严重 9.8joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
• CVE-2018-14388中危 5.4joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.