CVE-2020-5616
Summary
| CVE | CVE-2020-5616 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-08-04 02:15:00 UTC |
| Updated | 2020-08-06 20:43:00 UTC |
| Description | [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] free edition ver1.0.0, [Gallery01] free edition ver1.0.3 and earlier, [CalendarForm01] free edition ver1.0.3 and earlier, and [Link01] free edition ver1.0.0 allows remote attackers to bypass authentication and log in to the product with administrative privileges via unspecified vectors. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Calendar01 Project | Calendar01 | 1.0.0 | All | All | All |
| Application | Calendar01 Project | Calendar01 | 1.0.0 | All | All | All |
| Application | Calendar02 Project | Calendar02 | 1.0.0 | All | All | All |
| Application | Calendar02 Project | Calendar02 | 1.0.0 | All | All | All |
| Application | Calendarform01 Project | Calendarform01 | All | All | All | All |
| Application | Gallery01 Project | Gallery01 | All | All | All | All |
| Application | Link01 Project | Link01 | 1.0.0 | All | All | All |
| Application | Link01 Project | Link01 | 1.0.0 | All | All | All |
| Application | Pkobo-news01 Project | Pkobo-news01 | All | All | All | All |
| Application | Pkobo-vote01 Project | Pkobo-vote01 | All | All | All | All |
| Application | Telop01 Project | Telop01 | 1.0.0 | All | All | All |
| Application | Telop01 Project | Telop01 | 1.0.0 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JVN#73169744: Multiple vulnerabilities in multiple PHP Factory products | MISC | jvn.jp | Third Party Advisory |
| 【Telop01】PHPテロップ・ニュースティッカー・ヘッドラインCMSフリー（無料）版（スマホ対応）｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| 【PKOBO-vote01】PHP投票・アンケートシステム（連続、多重投票防止付き）CMS フリー（無料）版｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| 【Calendar01】PHP営業日カレンダー・スケジュールカレンダーCMS フリー（無料）版｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| PHP営業日・スケジュールカレンダー（テキスト入力付）CMS フリー（無料）版｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| PHPリンク集ページCMS フリー（無料）版｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| PHP写真ギャラリー（フォトアルバム）CMS フリー（無料）｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| 受付上限設定付き PHP予約・応募フォーム連動 営業日カレンダー フリー（無料）版｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| 【PKOBO-News01】PHP新着情報・お知らせ・ニュースCMSプログラム フリー（無料）版｜PHP工房 | MISC | www.php-factory.net | Product, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.