厂商漏洞
「craftercms」的相关漏洞
| 产品名称 | AVD编号 | 漏洞名称 | 披露时间 |
|---|---|---|---|
| Crafter Cms | |||
| AVD-2018-19907 | Crafter CMS 安全漏洞 | 2018-12-06 | |
| AVD-2017-15680 | craftercms crafter_cms 授权机制缺失 | 2020-11-28 | |
| AVD-2017-15683 | craftercms crafter_cms xml注入（xpath盲注） | 2020-11-28 | |
| AVD-2017-15686 | craftercms crafter_cms 在web页面生成时对输入的转义处理不恰当（跨站脚本） | 2020-11-28 | |
| AVD-2021-23261 | Crafter CMS System Configuration File denial of service | 2021-12-03 | |
| AVD-2021-23262 | craftercms crafter_cms 动态管理代码资源的控制不恰当 | 2021-12-03 | |
| AVD-2017-15681 | craftercms crafter_cms 对路径名的限制不恰当（路径遍历） | 2020-11-28 | |
| AVD-2017-15684 | craftercms crafter_cms 对路径名的限制不恰当（路径遍历） | 2020-11-28 | |
| AVD-2021-23264 | craftercms crafter_cms 将资源暴露给错误范围 | 2021-12-03 | |
| AVD-2021-23260 | craftercms crafter_cms 在web页面生成时对输入的转义处理不恰当（跨站脚本） | 2021-12-03 | |
| AVD-2021-23258 | craftercms crafter_cms 动态管理代码资源的控制不恰当 | 2021-12-03 | |
| AVD-2017-15682 | craftercms crafter_cms 在web页面生成时对输入的转义处理不恰当（跨站脚本） | 2020-11-28 | |
| AVD-2017-15685 | craftercms crafter_cms xml注入（xpath盲注） | 2020-11-28 | |
| AVD-2021-23263 | craftercms crafter_cms 将资源暴露给错误范围 | 2021-12-03 | |
| AVD-2021-23259 | craftercms crafter_cms 动态管理代码资源的控制不恰当 | 2021-12-03 | |
| Studio | |||
| AVD-2020-25802 | craftercms studio 动态管理代码资源的控制不恰当 | 2020-10-07 | |
| AVD-2020-25803 | craftercms studio 动态管理代码资源的控制不恰当 | 2020-10-07 |