الباحثون
رجوع
Hu3Sky
#11946
من 60,577
26.9
إجمالي CVSS
الثغرات
·
4
متوسطة
2
عالية
1
حرجة
1
PT-2018-13735
2018-09-10
9.8
CVE-2018-16771
Hoosk
Hoosk
The issue allows PHP code execution via a SiteUrl that is provided during installation and mishandled in config.php.
PT-2018-13736
2018-09-10
4.8
CVE-2018-16772
Hoosk
Hoosk
The issue allows for XSS via the Navigation Title of a new page entered at "admin/pages/new".
PT-2018-13737
2018-09-10
4.8
CVE-2018-16773
Easycms
Easycms
The issue allows for XSS via the `index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent` content field.
PT-2018-13738
2018-09-10
7.5
CVE-2018-16774
Hongcms
Hongcms
The issue allows for arbitrary file deletion. This can be achieved by manipulating the `file` parameter in the `/admin/index.php/language/ajax` endpoint with a `../` sequence and setting the `action` parameter to `delete`.