CVE-2018-18775

概要

参考情報

• packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html · Exploit
• exploit-db.com/exploits/45755 · Exploit

microstrategy web のその他の脆弱性

• CVE-2020-22983高 8.1A Server-Side Request Forgery (SSRF) vulnerability exists in MicroStrategy Web SDK 11.1 and earlier, allows remote unauthenticated attackers…
• CVE-2020-11453中 5.3Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStr…
• CVE-2020-11452中 4.3Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases. By p…
• CVE-2020-11454中 5.4Microstrategy Web 10.4 is vulnerable to Stored XSS in the HTML Container and Insert Text features in the window, allowing for the creation o…
• CVE-2020-11451高 7.2The Upload Visualization plugin in the Microstrategy Web 10.4 admin panel allows an administrator to upload a ZIP archive containing files w…