CVE-2017-17892

概要

参考情報

• d4wner/Vulnerabilities-Report · Exploit

readymade video sharing script のその他の脆弱性

• CVE-2017-17893中 6.1Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edi…
• CVE-2017-17891高 8.8Readymade Video Sharing Script has CSRF via user-profile-edit.php.
• CVE-2017-17649中 6.1Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.
• CVE-2017-17627緊急 9.8Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.