相关漏洞推荐 POC CVE-2025-14611: Gladinet CentreStack & Triofox - Hardcoded Credentials 金和OA C6系统 VouchUpdate.aspx SQL注入漏洞 西安九佳易信息资讯有限公司时尚企业管理系统UpdatePrivilegedState code参数存在SQL注入漏洞 POC CVE-2020-20627: GiveWP - Missing Authorization to Settings Update (CVE-2025-14611)Gladinet CentreStack和Triofox AES加密硬编码漏洞导致任意文件包含及安全降级 POC CVE-2021-36888: WordPress Image Hover Ultimate - Unauthenticated Settings Update POC CVE-2022-28666: Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update POC CVE-2022-33198: WordPress Accordions - Unauthenticated Settings Update POC CVE-2022-34487: ShortCode Addons - Unauthenticated Options Update POC CVE-2024-9161: Rank Math SEO < 1.0.229 - Unauthenticated User and Term Metadata Insert/Update/Deletion POC CVE-2025-13315: Twonky Server 8.5.2 on Linux and Windows - Log File Exposure 金和OA ArchivesRoomUpdate.aspx SQL注入漏洞 Windows PolicyConfiguration 计划任务特权提升漏洞(CVE-2025-60710)