CVE:CVE-2019-6295
CNNVD:CNNVD-201901-476
Cleanto是一套专为清洁服务公司开发的一套在线预订系统。
Cleanto 5.0版本中的assets/lib/service_method_ajax.php文件存在SQL注入漏洞。远程攻击者可借助‘service_id’参数利用该漏洞执行SQL命令。
solution:Upgrade skymoonlabs cleanto to a higher version than 5.0,and avoid the version 5.0
solution:Upgrade f5 big-ip_access_policy_manager to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_advanced_firewall_manager to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_application_acceleration_manager to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_edge_gateway to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_fraud_protection_service to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_global_traffic_manager to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_link_controller to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_local_traffic_manager to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_policy_enforcement_manager to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_protocol_security_module to a higher version than 11.6.3,and avoid the version [11.2.1,11.6.3]; Upgrade f5 big-ip_protocol_security_manager to a higher version than 12.1.3,13.1.1.1,14.0.0.2,and avoid the version [12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_webaccelerator to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.0.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_analytics to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]; Upgrade f5 big-ip_application_security_manager to a higher version than 11.6.3,12.1.3,13.1.1.1,14.0.0.2,and avoid the version [11.2.1,11.6.3],[12.1.0,12.1.3],[13.0.0,13.1.1.1],[14.0.0,14.0.0.2]