The member center function in fastadmin V1.0.0.20200506_beta is vulnerable to a Server-Side Template Injection (SSTI) vulnerability.
References
Link | Resource |
---|---|
https://www.cnpanda.net/codeaudit/777.html | Exploit Third Party Advisory |
https://www.cnpanda.net/codeaudit/777.html | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 05:19
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.cnpanda.net/codeaudit/777.html - Exploit, Third Party Advisory |
Information
Published : 2020-12-10 23:15
Updated : 2024-11-21 05:19
NVD link : CVE-2020-25967
Mitre link : CVE-2020-25967
CVE.ORG link : CVE-2020-25967
JSON object : View
Products Affected
microsoft
- windows
fastadmin
- fastadmin
CWE
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')