CVE-2015-20115

概要

参考情報

• exploit-db.com/exploits/38496 · Exploit
• vulncheck.com/advisories/realtyscript-stored-cross-site-scripting-via-file-upload-parameter · Third Party Advisory
• zeroscience.mk/en/vulnerabilities/ZSL-2015-5269.php · Exploit

realtyscript のその他の脆弱性

• CVE-2015-20121緊急 9.8Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database qu…
• CVE-2015-20120緊急 9.8Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers…
• CVE-2015-20119中 5.4Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject ma…
• CVE-2015-20118中 6.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin loca…
• CVE-2015-20117高 8.8Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create u…