拓尔思-MAS Comment 插件存在XML实体注入

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities

• PoCCVE-2010-1601: Joomla! Component JA Comment - Local File Inclusion
• PoCCVE-2010-1602: Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion
• PoCCVE-2010-2050: Joomla! Component MS Comment 0.8.0b - Local File Inclusion
• PoCCVE-2020-26248: PrestaShop Product Comments <4.2.0 - SQL Injection
• PoCCVE-2020-35598: Advanced Comment System 1.0 - Local File Inclusion
• PoCCVE-2021-24838: WordPress AnyComment <0.3.5 - Open Redirect
• PoCCVE-2022-4295: Show all comments < 7.0.1 - Cross-Site Scripting
• PoCCVE-2019-9881: WPEngine WPGraphQL 0.2.3 - Unauthenticated Comment Posting
• PoCaspcms-commentlist-sql-injection: AspCMS commentList.asp SQL注入漏洞
• PoCCVE-2025-5701: HyperComments <= 1.2.2 - Arbitrary Options Update
• PoCaspcms-commentlist-sqli: AspCMS commentList.asp - SQL Injection
• WordPress plugin Comments Import & Export 跨站脚本漏洞
• WordPress plugin azurecurve Shortcodes in Comments 代码注入漏洞