CVE-2018-13256

概要

参考情報

• gkaim.com/cve-2018-13256-vikas-chaudhary · Exploit
• exploit-db.com/exploits/45125 · Broken Link

auditor website project のその他の脆弱性

• CVE-2019-7553中 5.4PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field.
• CVE-2018-20638中 6.5PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directo…
• CVE-2018-20637中 6.5PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 allows remote attackers to cause a denial of service (unrecoverable blank prof…
• CVE-2018-20636中 5.4PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
• CVE-2018-15186高 8.8PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php.