CVE-2020-18646
HIGH
7.5
CVSS Severity Score
Vulnerability Description
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".
Affected Platforms (CPE)
📦
5none
CVEブラウザに戻る
関連する脆弱性情報
CVE-2018-200629.8
An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via ...
CVE-2018-72198.8
application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an accou...
CVE-2020-186477.5
Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor"...
CVE-2018-60297.5
The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of in...