CVE-2022-41495: Server-Side Request Forgery (SSRF)

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

CVE-2022-41497

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...

PT-2022-25894 · Unknown · Clippercms

Name of the Vulnerable Software and Affected Versions: ClipperCMS version 1.3.3 Description: A Server-Side Request Forgery SSRF issue was discovered, which can be exploited via the pkg url parameter at the "/manager/index.php" API endpoint. Recommendations: For ClipperCMS version 1.3.3, avoid usi...

CVE-2022-41495

CVE-2022-41495 affects ClipperCMS 1.3.3 and is a Server-Side Request Forgery (SSRF) vulnerability exploitable via the rss_url_news parameter at /manager/index.php. The CVSS shows Network attack, no user interaction, with high impact on confidentiality, integrity, and availability (base score 9.8)...

CVE-2022-41497: Server-Side Request Forgery (SSRF)

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the pkgurl parameter at /manager/index.php...

CVE-2022-41495

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

ClipperCMS 代码问题漏洞

ClipperCMS is a content management system CMS from the ClipperCMS team. A security vulnerability exists in ClipperCMS version 1.3.3, which originates from the inclusion of server-side request forgery SSRF via the rssurlnews parameter in /manager/index.php...

CVE-2022-41497

CVE-2022-41497 affects ClipperCMS 1.3.3, where a Server-Side Request Forgery (SSRF) can be triggered via the pkg_url parameter at /manager/index.php. The CVSS v3.1 vector indicates a critical impact (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a base score of 9.8. Exploitation is referenced in a co...

CVE-2022-41495

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

CVE-2022-41495

ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery SSRF via the rssurlnews parameter at /manager/index.php...

CVE-2018-19424

ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files...

Design/Logic Flaw

ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files...

CVE-2018-19424

ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files...

CVE-2018-19424

ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files...

CVE-2018-19424

CVE-2018-19424 affects ClipperCMS 1.3.3, where the vulnerability allows remote authenticated administrators to upload .htaccess files. The available documents describe the flaw’s existence and impact (unauthorized or unintended server configuration changes via .htaccess uploads) but do not provid...

CVE-2018-19424: Unrestricted Upload of File with Dangerous Type

ClipperCMS 1.3.3 allows remote authenticated administrators to upload .htaccess files...

PT-2018-14958

Name of the Vulnerable Software and Affected Versions ClipperCMS version 1.3.3 Description The issue allows remote authenticated administrators to upload .htaccess files, which could potentially lead to security problems. Recommendations For ClipperCMS version 1.3.3, restrict access to the file...

ClipperCMS 1.3.3 Cross Site Request Forgery

Exploit Title: ClipperCMS 1.3.3 File Upload CSRF Vulnerability Date: 2018-11-11 Exploit Author: Ameer Pornillos Website: http://ethicalhackers.club Vendor Homepage: http://www.clippercms.com/ Software Link: https://github.com/ClipperCMS/ClipperCMS/releases/tag/clipper1.3.3 Version: 1.3.3 Tested o...

ClipperCMS 1.3.3 - Cross-Site Request Forgery (File Upload) Vulnerability

Exploit for php platform in category web applications Exploit Title: ClipperCMS 1.3.3 File Upload CSRF Vulnerability Exploit Author: Ameer Pornillos Website: http://ethicalhackers.club Vendor Homepage: http://www.clippercms.com/ Software Link:...

ClipperCMS 1.3.3 - Cross-Site Request Forgery (File Upload)

ClipperCMS 1.3.3 - Cross-Site Request Forgery File Upload Exploit Title: ClipperCMS 1.3.3 File Upload CSRF Vulnerability Date: 2018-11-11 Exploit Author: Ameer Pornillos Website: http://ethicalhackers.club Vendor Homepage: http://www.clippercms.com/ Software Link:...