CVE-2018-11735

概要

参考情報

• XIMDEX/ximdex · Third Party Advisory

ximdex のその他の脆弱性

• CVE-2018-12273中 6.1The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.
• CVE-2018-12272中 6.1xowl/request.php in Ximdex 4.0 has XSS via the content parameter.
• CVE-2018-12047中 6.1xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through…