Ghost CMS static-theme.js 目录遍历漏洞
PoC代码
暂无相关漏洞推荐
- 智联云采 SRM2.0 /adpweb/static/..;/a/db/dbBackupScheme/restore 命令执行漏洞
- lsfusion /file/static/noauth 目录遍历漏洞（CVE-2025-13261）
- POC wp-twenty-theme-fpd: WordPress Twenty Seventeen - Full Path Disclosure
- 智互联-SRM /adpweb/static/..;/api/authority/getUser 信息泄露漏洞
- POC CVE-2019-20210: WordPress CTHthemes - Cross-Site Scripting
- POC CVE-2021-29484: Ghost CMS <=4.32 - Cross-Site Scripting
- POC CVE-2023-32235: Ghost CMS < 5.42.1 - Path Traversal
- POC CVE-2024-6420: Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure
- POC CVE-2020-1938: Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability
- POC CVE-2019-17230: WordPress OneTone theme <= 3.0.6 – Unauthenticated Options Changes
- POC CVE-2019-17231: WordPress OneTone theme <= 3.0.6 – Unauthenticated Stored XSS
- POC CVE-2020-1938: Ghostcat - Apache Tomcat - AJP File Read/Inclusion Vulnerability
- POC azure-storage-static-website-review: Azure Storage Static Website Configuration Review