PT-2023-22373 · Sofawiki · Sofawiki

Name of the Vulnerable Software and Affected Versions: SofaWiki versions prior to 3.8.9 Description: The issue is related to a file upload vulnerability that can lead to command execution. Recommendations: For versions prior to 3.8.9, update to version 3.8.9 or later to resolve the issue...

CVE-2023-29721

CVE-2023-29721 affects SofaWiki versions up to 3.8.9. A file-upload vulnerability allows command execution, per multiple connected records (e.g., Red Hat, NVD, CNNVD). The CVSS indicates critical impact with network attack vector and no user interaction required. Remediation guidance found in PT-...

SofaWiki Cross-Site Scripting Vulnerability

SofaWiki is a CMS built on PHP. A cross-site scripting vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in index.php, and can be exploited by an attacker to execute arbitrary web script or HTML by...

CVE-2023-29720

SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...

CVE-2023-29720

SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...

Cross site scripting

SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...

CVE-2023-29720

SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...

CVE-2023-29720

SofaWiki =3.8.9 is vulnerable to Cross Site Scripting XSS via index.php...

CVE-2023-29720

SofaWiki

SofaWiki 跨站脚本漏洞

SofaWiki is a CMS built on PHP. A cross-site scripting vulnerability exists in SofaWiki 3.8.9 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data in index.php, and can be exploited by an attacker to execute arbitrary web script or HTML by...