CVE-2020-15182

The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). The vulnerability affects versions 2.0.0.3 and earlier of SOY Inquiry. This allows remote attackers to force the administrator to edit files once the administrator loads a specially crafted webpage. An administrator must be logged in for exploitation to be possible. This issue is fixed in SOY Inquiry version 2.0.0.4 and included in SOY CMS 3.0.2.328.

• CWE-22
• CWE-352

• https://github.com/inunosinsi/soycms/pull/15Patch, Third Party Advisory
• https://github.com/inunosinsi/soycms/security/advisories/GHSA-j2qw-747j-mfv4Third Party Advisory
• https://youtu.be/ffvKH3gwyREExploit, Third Party Advisory
• https://github.com/inunosinsi/soycms/pull/15Patch, Third Party Advisory
• https://github.com/inunosinsi/soycms/security/advisories/GHSA-j2qw-747j-mfv4Third Party Advisory
• https://youtu.be/ffvKH3gwyREExploit, Third Party Advisory

Published

Sep 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15177In GLPI before version 9.5.2, the `install/install.php` endp…6.1
• CVE-2020-15178In PrestaShop contactform module (prestashop/contactform) be…9.3
• CVE-2020-15179The ScratchSig extension for MediaWiki before version 1.0.1 …9
• CVE-2020-1518An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15180A flaw was found in the mysql-wsrep component of mariadb. La…9
• CVE-2020-15181The Alfresco Reset Password add-on before version 1.2.0 reli…9.8
• CVE-2020-15183SoyCMS 3.0.2 and earlier is affected by Reflected Cross-Site…4.8
• CVE-2020-15184In Helm before versions 2.16.11 and 3.3.2 there is a bug in …2.7
• CVE-2020-15185In Helm before versions 2.16.11 and 3.3.2, a Helm repository…2.7
• CVE-2020-15186In Helm before versions 2.16.11 and 3.3.2 plugin names are n…2.7
• CVE-2020-15187In Helm before versions 2.16.11 and 3.3.2, a Helm plugin can…4.7
• CVE-2020-15188SOY CMS 3.0.2.327 and earlier is affected by Unauthenticated…9.8