CVE-2020-25473

Description

References

• news.websec.nl · Broken Link
• websec.nl · Not Applicable
• linkedin.com/feed/update/urn:li:activity:6736997788850122752 · Third Party Advisory

news script php pro 的其他漏洞

• CVE-2020-25475严重 9.8SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.
• CVE-2020-25474中危 6.1SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.
• CVE-2020-25472中危 6.5SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new…