PT-2020-14253
CVE-2020-15182
·
Published
2020-09-17
·
Updated
2020-09-23
Description by
CVSS 3.1
9.6
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SOY Inquiry versions 2.0.0.3 and earlier
Description
The issue affects the SOY Inquiry component of SOY CMS, allowing remote attackers to force administrators to edit files by loading a specially crafted webpage. This can happen when an administrator is logged in.
Recommendations
For SOY Inquiry versions 2.0.0.3 and earlier, update to version 2.0.0.4 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾