CVE-2020-15182

CVE-2020-15182 affects the SOY Inquiry component in SOY CMS (versions ≤ 2.0.0.3). The issue combines CSRF with Remote Code Execution, allowing a logged-in administrator to be forced to edit files when visiting a crafted page. Remediation is to upgrade to SOY Inquiry 2.0.0.4 and SOY CMS 3.0.2.328....

CVE-2020-15182 Cross-site Request Forgery leading to RCE in SOY CMS

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery CSRF and Remote Code Execution RCE. The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially...