Kentico CMS up to 9.0.50/10.0.47 CMS Administration Dashboard CMSInstall/install.aspx 访问控制漏洞

漏洞描述

PoC代码

暂无

相关漏洞推荐

• 微力同步 /rest/f/api/resources/f96956469e7be39d 文件读取漏洞
• Frappe /api/method/frappe.automation.doctype.auto_repeat.auto_repeat.generate_message_preview SQL 注入漏洞（CVE-2025-68929）
• Frappe /files 目录遍历漏洞（CVE-2025-68953）
• POC CVE-2024-29138: WordPress Restrict User Access <= 2.5 - Cross-Site Scripting
• POC CVE-2025-52691: SmarterMail - Unrestricted File Upload
• POC CVE-2006-3392: Webmin < 1.290 / Usermin < 1.220 - Arbitrary File Disclosure
• POC CVE-2017-20192: Formidable Forms < 2.05.02 - Cross-Site Scripting
• POC CVE-2018-6961: VMware NSX SD-WAN Edge - Command Injection
• POC CVE-2018-9206: Blueimp jQuery-File-Upload v9.22.0 - Unrestricted File Upload
• POC CVE-2019-11253: Kubernetes API Server - YAML Parsing DoS (Billion Laughs)
• POC CVE-2019-15823: WPS Hide Login <= 1.5.2.2 - Login Page Bypass
• POC CVE-2019-5591: FortiOS - Insecure LDAP Configuration Detection
• POC CVE-2019-9082: ThinkPHP < 3.2.4 - Remote Code Execution