CVE-2018-15188

概要

参考情報

• gkaim.com/cve-2018-15188-vikas-chaudhary · Exploit

advanced real estate script のその他の脆弱性

• CVE-2019-20337高 7.2In PHP Scripts Mall advanced-real-estate-script 4.0.9, the news_edit.php news_id parameter is vulnerable to SQL Injection.
• CVE-2019-20336中 6.1In PHP Scripts Mall advanced-real-estate-script 4.0.9, the search-results.php searchtext parameter is vulnerable to XSS.
• CVE-2018-15189中 5.4PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
• CVE-2018-15187高 8.0PHP Scripts Mall advanced-real-estate-script 4.0.9 has CSRF via edit-profile.php.
• CVE-2017-17603緊急 9.8Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice p…