EUVD-2020-7250

Malware in sbrugna...

CVE-2020-15182

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

Cross site request forgery (csrf)

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...

CVE-2020-15182

CVE-2020-15182 affects the SOY Inquiry component in SOY CMS (versions ≤ 2.0.0.3). The issue combines CSRF with Remote Code Execution, allowing a logged-in administrator to be forced to edit files when visiting a crafted page. Remediation is to upgrade to SOY Inquiry 2.0.0.4 and SOY CMS 3.0.2.328....

CVE-2020-15182: Improper Limitation of a Pathname to a Restricted Directory

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...