Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2018-16239

EPSS 0.42% · P62
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2018-16239

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in damiCMS V6.0.1. It relies on the PHP time() function for cookies, which makes it possible to determine the cookie for an existing admin session via 10800 guesses.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
damiCMS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
DamiCMS是一套用于快速搭建网站的内容管理系统(CMS)。 damiCMS 6.0.1版本中存在安全漏洞,该漏洞源于程序依赖‘PHP time()’函数生成cookies。攻击者可通过进行猜测(最多10800次)利用该漏洞获取管理员权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2018-16239

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-16239

Please Login to view more intelligence information

Same Patch Batch · n/a · 2018-08-30 · 31 CVEs total

CVE-2018-14901EPSON iPrint application for Android 安全漏洞
CVE-2018-16238damiCMS 安全漏洞
CVE-2018-16237damiCMS 路径遍历漏洞
CVE-2018-16236cPanel 跨站脚本漏洞
CVE-2018-16234MorningStar WhatWeb 跨站脚本漏洞
CVE-2018-16233MiniCMS 跨站脚本漏洞
CVE-2018-16231Michael Roth Software Personal FTP Server 安全漏洞
CVE-2018-15745Argus Surveillance DVR 路径遍历漏洞
CVE-2018-15480多款myStrom WiFi产品安全漏洞
CVE-2018-15479多款myStrom WiFi产品安全漏洞
CVE-2018-15478多款myStrom WiFi产品安全漏洞
CVE-2018-15477myStrom WiFi Switch V1 安全漏洞
CVE-2018-15476多款myStrom WiFi产品安全漏洞
CVE-2018-14903EPSON WF-2750打印机安全漏洞
CVE-2018-14902EPSON iPrint application for Android 安全漏洞
CVE-2018-16056Wireshark Bluetooth Attribute Protocol解析器注入漏洞
CVE-2018-14900EPSON WF-2750打印机安全漏洞
CVE-2018-14899EPSON WF-2750打印机安全漏洞
CVE-2018-11720Xovis PC2、PC2R和PC3传感器路径遍历漏洞
CVE-2018-11719Xovis PC2、PC2R和PC3传感器安全漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2018-16239

No comments yet


Leave a comment