CVE-2018-18433

概要

参考情報

• AvaterXXX/DESTOON · Exploit
• patec.cn/newsshow.php · Exploit

destoon b2b のその他の脆弱性

• CVE-2018-18432高 8.8An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request.
• CVE-2018-18431中 4.8An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI.
• CVE-2018-18430中 4.8An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI.