CVE-2017-17649

概要

参考情報

• packetstormsecurity.com/files/145438/Readymade-Video-Sharing-Script-3.2-HTML-Injection.html · Exploit
• exploit-db.com/exploits/43333 · Exploit

readymade video sharing script のその他の脆弱性

• CVE-2017-17893中 6.1Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edi…
• CVE-2017-17892緊急 9.8Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.
• CVE-2017-17891高 8.8Readymade Video Sharing Script has CSRF via user-profile-edit.php.
• CVE-2017-17627緊急 9.8Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.