CVE-2018-20634

概要

参考情報

• gkaim.com/cve-2018-20634-vikas-chaudhary · Exploit

advance b2b script のその他の脆弱性

• CVE-2018-20635中 4.3PHP Scripts Mall Advance B2B Script 2.1.4 has directory traversal via a direct request for a listing of an image directory such as an assets…
• CVE-2018-20633高 8.8PHP Scripts Mall Advance B2B Script 2.1.4 has Cross-Site Request Forgery (CSRF) via the Edit Profile feature.
• CVE-2018-20632中 5.4PHP Scripts Mall Advance B2B Script 2.1.4 has stored Cross-Site Scripting (XSS) via the FIRST NAME or LAST NAME field.
• CVE-2017-17602緊急 9.8Advance B2B Script 2.1.3 has SQL Injection via the tradeshow-list-detail.php show_id or view-product.php pid parameter.