CVE-2018-19560

Description

References

• bagesoft/bagecms · Exploit

bagecms 的其他漏洞

• CVE-2023-37122中危 5.4A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted …
• CVE-2019-8421高危 7.2upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.
• CVE-2018-19104高危 8.8In BageCMS 3.1.3, upload/index.php has a CSRF vulnerability that can be used to upload arbitrary files and get server privileges.
• CVE-2018-18258严重 9.8An issue was discovered in BageCMS 3.1.3. The attacker can execute arbitrary PHP code on the web server and can read any file on the web ser…
• CVE-2018-18257高危 7.5An issue was discovered in BageCMS 3.1.3. An attacker can delete any files and folders on the web server via an index.php?r=admini/template/…