CVE-2022-1909

Description

References

• causefx/organizr commit d5245ca · Patch
• huntr.dev/bounties/8f83eb8f-51a8-41c0-bc7d-077f48faebdc · Exploit

organizr 的其他漏洞

• CVE-2024-41372严重 9.8Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/settyping.php.
• CVE-2024-41371中危 6.1Organizr v1.90 is vulnerable to Cross Site Scripting (XSS) via api.php.
• CVE-2024-41370严重 9.8Organizr v1.90 was discovered to contain a SQL injection vulnerability via chat/setlike.php.
• CVE-2022-1699高危 7.5Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS …
• CVE-2022-1698高危 7.5Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused …