PRODUCT PROFILE

eframework

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危2020/08/27

Mida eFramework - Cross-Site Scripting

Mida eFramework contains a cross-site scripting vulnerability. An attacker can execute arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

eframeworkPoC 已收录

CVSS7.2

严重CVE-2020-159202020/07/24

Mida eFramework <=2.9.0 - Remote Command Execution

Mida eFramework through 2.9.0 allows an attacker to achieve remote code execution with administrative (root) privileges. No authentication is required.

eframeworkPoC 已收录RCE

CVSS9.8EPSS 93.9%