CVE-2018-14967

概要

参考情報

• AvaterXXX/emlsoft · Exploit

emlsoft のその他の脆弱性

• CVE-2018-14968緊急 9.8An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter.
• CVE-2018-14966高 8.8An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.
• CVE-2018-14965高 8.8An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF.
• CVE-2018-14964中 5.4An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page.