Beveiligingsadvies

CVE-2020-13873

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-05-12 11:42:29

Laatst bijgewerkt 2024-08-04 12:32:14

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin. (As an admin, an attacker can upload a PHP shell and execute remote code on the operating system.)

← Alle CVE's bekijken Bekijk op cve.org ↗