漏洞描述 Phoenix Contact Automationworx Suite 包含 PC Worx 以及 PC Worx Express 中存在栈缓冲区溢出漏洞。此漏洞是由于未充分验证用户输入的PLCOpen XML文件数据所导致的。
相关漏洞推荐 (CVE-2025-4665) Contact Form CFDB7 SQL注入与不安全反序列化漏洞 用友NC ContactsQueryServiceServlet 反序列化漏洞 用友NC ContactsFuzzySearchServlet 反序列化漏洞 POC CVE-2010-1723: Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion POC CVE-2017-1000163: Phoenix Framework - Open Redirect POC CVE-2017-18490: Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting POC CVE-2017-18491: Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting POC CVE-2017-18492: Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting POC CVE-2020-12800: WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution POC CVE-2021-24276: WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting POC CVE-2021-24278: WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation POC CVE-2021-25063: WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting POC CVE-2021-25079: Contact Form Entries < 1.2.4 - Cross-Site Scripting