CVE-2018-18209

Description

References

• chekun/DiliCMS · Exploit

Weitere Schwachstellen in dilicms

• CVE-2019-8440MITTEL 4.8An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site …
• CVE-2019-8439MITTEL 5.4An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting->site setting" of adm…
• CVE-2019-8438MITTEL 4.8An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting->site setting" of admi…
• CVE-2018-19291MITTEL 6.5An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or…
• CVE-2018-18210MITTEL 6.1XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.