CVE-2018-8903

Description

References

• nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html · Exploit
• exploit-db.com/exploits/44354 · Exploit

Weitere Schwachstellen in open-audit

• CVE-2018-9137MITTEL 6.8Open-AudIT before 2.2 has CSV Injection.
• CVE-2018-9155MITTEL 5.4Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2018-8937MITTEL 6.1An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /l…
• CVE-2018-8979HOCH 8.8Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.
• CVE-2018-8978MITTEL 5.4Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.