CVE-2018-10297

概要

参考情報

• laworigin.github.io/2018/04/22/Discuz-x-portal-Stored-XSS · Exploit

discuzx のその他の脆弱性

• CVE-2024-30884高 7.1Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and o…
• CVE-2022-45543中 6.1Cross site scripting (XSS) vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or usernam…
• CVE-2018-10298中 5.4Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does …
• CVE-2018-5377緊急 9.8Discuz! DiscuzX X3.4 allows remote attackers to bypass intended access restrictions via the archiver\index.php action parameter.
• CVE-2018-5376中 6.1Discuz! DiscuzX X3.4 has XSS via the include\spacecp\spacecp_upload.php op parameter.