CVE-2018-5291

概要

参考情報

• d4wner/Vulnerabilities-Report · Exploit
• wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system · Broken Link
• wpvulndb.com/vulnerabilities/8995 · Third Party Advisory

gd rating system のその他の脆弱性

• CVE-2018-5293中 6.1The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page.
• CVE-2018-5292中 6.1The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-information page.
• CVE-2018-5290高 7.5The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tra…
• CVE-2018-5289高 7.5The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-inf…
• CVE-2018-5288中 6.1The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page.