CVE-2024-31666

脆弱性の概要 Flusity-CMS v.2.33 には脆弱性が存在し、リモート攻撃者が細工されたスクリプトを通じて editaddonpost.php コンポーネントで任意のコードを実行できる可能性があります。 影響を受けるバージョン Flusity-CMS v.2.33 脆弱性の詳細 攻撃者は editaddonpost.php コンポーネントに細工されたスクリプトを送信することでこの脆弱性を悪用し、標的サーバー上で任意のコードを実行する可能性があります。 影響 この脆弱性により、攻撃者がサーバー上で任意のコードを実行し、サーバー全体を制御できる可能性があります。 発見者：胡詩雅...

CVE-2024-31666

Vulnerability Overview A vulnerability exists in Flusity-CMS v.2.33 that allows a remote attacker to execute arbitrary code via a crafted script in the editaddonpost.php component. Affected Versions Flusity-CMS v.2.33 Vulnerability Details An attacker can exploit this vulnerability by sending a...

CVE-2024-31666

An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the editaddonpost.php component...

CVE-2024-31666

An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the editaddonpost.php component...

CVE-2024-31666

An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the editaddonpost.php component...

CVE-2024-31666

An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the editaddonpost.php component...

CVE-2024-31666: Improper Control of Generation of Code

An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the editaddonpost.php component...

CVE-2024-23094: Cross-Site Request Forgery (CSRF)

Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /cover/addons/infomediagallery/action/editaddonpost.php...

CVE-2024-23094

Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /cover/addons/infomediagallery/action/editaddonpost.php...