CVE-2020-15183highCWE-79

CVE-2020-15183: falha de alta gravidade em inunosinsi soycms

Reflected XSS leading to RCE in SoyCMS

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar soycms

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.4epss 1.7%
SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site Scripting (XSS) which leads to Remote Code Execution (RCE) from a known vulnerability. This allows remote attackers to force the administrator to edit files once the adminsitrator loads a specially crafted webpage.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Produtos afetados
inunosinsi · soycms
CVEs relacionadas — inunosinsi soycms

No mesmo produto, das mais perigosas para as menos.

CVE-2020-15188CRITICALUnauthenticated Remote Code Execution in SOY CMSEPSS 5.1%CVE-2020-15189MEDIUMRemote Code Execution in SOY CMSEPSS 2.8%CVE-2024-28187HIGHOS Command Injection Vulnerability in SOY CMSEPSS 1.6%CVE-2020-15182HIGHCross-site Request Forgery leading to RCE in SOY CMSEPSS 1.2%