CVE-2018-9121

概要

参考情報

• seekurity.com/blog/general/multiple-cross-site-scripting-vulnerabilities-in-crea8social-social-network-script · Exploit
• youtube.com/watch · Exploit

crea8social のその他の脆弱性

• CVE-2018-9123中 5.4In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.
• CVE-2018-9122中 5.4In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
• CVE-2018-9120中 5.4In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post.
• CVE-2015-1054低 3.5Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web s…