References https://www.twcert.org.tw/newepaper/cp-151-7828-c08b8-3.html https://www.twcert.org.tw/tw/cp-132-7828-c08b8-1.html https://www.twcert.org.tw/en/cp-139-7831-b9a46-2.html https://nvd.nist.gov/vuln/detail/CVE-2024-5514 https://cve.imfht.com/detail/CVE-2024-5514 https://www.twcert.org.tw/tw/lp-132-1-15-20.html https://minmax.tw/
Related VulnerabilitiesPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass畅捷CRM /lead/leadhiddenvalue.php/getlist SQL 注入漏洞PoCwp-security-hidden-login-exposure: WordPress All-in-One Security <=4.4.1 - Hidden Login Page ExposurePoCCVE-2023-4568: PaperCut NG Unauthenticated XMLRPC FunctionalityPoCCVE-2023-5089: Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)PoCCVE-2024-6289: WPS Hide Login < 1.9.16.4 - Hidden Login Page DisclosurePoCCVE-2024-6420: Hide My WP Ghost < 5.2.02 - Hidden Login Page DisclosurePoCesafenet-cdgserver3-hiddenwatermark-fileupload: 亿赛通电子文档管理系统-hiddenWatermark任意文件上传PoCdockerfile-hidden-disclosure: Dockerfile - Detect畅捷通CRM newleadhidden.php 存在SQL注入漏洞畅捷CRM newleadhidden.php SQL注入漏洞亿赛通 hiddenWatermark uploadFile任意文件上传漏洞FileCloud CSV User Import Functionality 漏洞