CVE-2020-18125

A reflected cross-site scripting XSS vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-18121

A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell...

CVE-2020-18121

The CVE-2020-18121 issue affects Indexhibit CMS, version 2.1.5, due to a misconfiguration that lets authenticated attackers modify .php files and obtain shell access. Root cause: misconfiguration in indexhibit 2.1.5; Impact: potential full shell on the server via modified PHP files. Exploitation ...

CVE-2020-18124

A cross-site request forgery CSRF vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords...

CVE-2020-18124

CVE-2020-18124 is a CSRF vulnerability in Indexhibit 2.1.5 that allows an attacker to arbitrarily reset user passwords. The connected documents confirm the affected software and the underlying issue (cross-site request forgery enabling password resets). There is no explicit information here about...

CVE-2020-18123

A cross-site request forgery CSRF vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts...

CVE-2020-18123

The CVE-2020-18123 entries describe a CSRF vulnerability in Indexhibit 2.1.5 that allows an attacker to arbitrarily delete administrator accounts. Affected software: Indexhibit 2.1.5 (web-based CMS). Underlying issue: cross-site request forgery enabling unauthorized admin deletion. Impact: admini...

CVE-2020-18126

Multiple stored cross-site scripting XSS vulnerabilities in the Sections module of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-18126

CVE-2020-18126 concerns Indexhibit 2.1.5 where the Sections module exposes multiple stored XSS vulnerabilities. The affected component is the Sections module within Indexhibit, version 2.1.5. The flaws allow attackers to inject and execute arbitrary web scripts/HTML in users’ browsers, via stored...

CVE-2020-18127

An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files...

CVE-2020-18127

CVE-2020-18127 affects Indexhibit 2.1.5, specifically the /config/config.php component. The vulnerability is an improper access control that lets an attacker view arbitrary files. Documented impact is file disclosure; no exploit details are provided in the sources. Related notices (e.g., PT-2021-...

Indexhibit 跨站脚本漏洞

Indexhibit, a web-based content management system, is vulnerable to a stored cross-site scripting vulnerability in the Sections module in Indexhibit version 2.1.5. An attacker can exploit this vulnerability to execute arbitrary web script or HTML...

Indexhibit 路径遍历漏洞

Indexhibit is a web-based content management system. An improper access control vulnerability exists in the /config/config.php component of Indexhibit version 2.1.5. An attacker could exploit this vulnerability to view arbitrary files...

Indexhibit 权限许可和访问控制问题漏洞

Indexhibit is a web-based content management system. indexhibit version 2.1.5 contains a misconfiguration vulnerability. An attacker could use this vulnerability to modify the .php file so that it can get a getshell...

Indexhibit 跨站脚本漏洞

Indexhibit is a web-based content management system. A reflection-based cross-site scripting vulnerability exists in the /plugin/ajax.php component of Indexhibit version 2.1.5. An attacker could use this vulnerability to execute arbitrary web script or HTML...

PT-2021-10137 · Unknown · Indexhibit

Name of the Vulnerable Software and Affected Versions: Indexhibit version 2.1.5 Description: An issue in the "/config/config.php" component allows attackers to arbitrarily view files. Recommendations: For Indexhibit version 2.1.5, consider restricting access to the "/config/config.php" component...

Indexhibit 跨站请求伪造漏洞

Indexhibit is a web-based content management system. indexhibit version 2.1.5 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to arbitrarily reset the account password...

Indexhibit 跨站请求伪造漏洞

Indexhibit is a web-based content management system. A cross-site request forgery vulnerability exists in Indexhibit version 2.1.5. An attacker can exploit this vulnerability to arbitrarily delete an administrator account...

Indexhibit Reinstallation Vulnerability

Indexhibit is a content management system CMS. A security vulnerability exists in Indexhibit version 2.1.5. The vulnerability can be exploited by an attacker to execute code via /ndxzstudio/install.php?p=2...

CVE-2019-16314

Indexhibit 2.1.5 allows a product reinstallation, with resultant remote code execution, via /ndxzstudio/install.php?p=2...