CVE-2015-1054

概要

参考情報

• codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270
• codecanyon.net/item/crea8social-php-social-networking-platform-v31/9211270/support
• osvdb.org/show/osvdb/116732
• packetstormsecurity.com/files/129816/Crea8Social-2.0-Cross-Site-Scripting.html · Exploit
• exploit-db.com/exploits/35691 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/99615

crea8social のその他の脆弱性

• CVE-2018-9123中 5.4In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.
• CVE-2018-9122中 5.4In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
• CVE-2018-9121中 5.4In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment.
• CVE-2018-9120中 5.4In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.