Pimcore标题字段存储型跨站脚本漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://sec-consult.com/vulnerability-lab/advisory/sql-injection-xss-csrf-vulnerabilities-in-pimcore-software/
• https://www.miggo.io/vulnerability-database/cve/CVE-2023-2730
• https://www.exploit-db.com/exploits/52194
• https://github.com/pimcore/pimcore/security/advisories/GHSA-xr3m-6gq6-22cg
• https://huntr.com/bounties/6c6f5c26-d545-4e7b-82bb-1fe28006c885
• https://feedly.com/cve/CVE-2023-2730

Related Vulnerabilities

• Pimcore grid-proxy CVE-2023-47637 SQL注入漏洞
• Pimcore CVE-2022-1429 SQL注入漏洞
• Pimcore CVE-2022-0831跨站脚本漏洞
• Pimcore CVE-2022-0258 SQL注入漏洞
• Pimcore GridHelperService.php SQL 注入漏洞
• Pimcore SearchController.php SQL注入漏洞
• Pimcore CVE-2023-2984 目录遍历漏洞
• (CVE-2023-3574) Pimcore Web内容管理平台 输入验证漏洞
• Pimcore 安全漏洞
• (CVE-2023-2339) pimcore/pimcore 跨站脚本漏洞