CVE-2024-56115 PoC — Amiro.CMS 安全漏洞

介绍

# CVE-2024-56115

# Suggested description
A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct an Cross-Site Scripting (XSS) attack.

# Vulnerability Type
CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

# Vendor of Product
Amiro.CMS (https://www.amiro.ru)

# Affected Product Code Base
Amiro.CMS – 7.8.4 and earlier

# Impact Escalation of Privileges
True

# Has vendor confirmed or acknowledged the vulnerability?
True

# Discoverer
Compliance Control Team

# Reference
https://www.amiro.ru

文件快照

备注