CVE-2018-20637

概要

参考情報

• gkaim.com/cve-2018-20637-vikas-chaudhary · Exploit

auditor website project のその他の脆弱性

• CVE-2019-7553中 5.4PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field.
• CVE-2018-20638中 6.5PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directo…
• CVE-2018-20636中 5.4PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
• CVE-2018-15186高 8.8PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php.
• CVE-2018-13256中 6.1PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.