Ajenti Cross-site Scripting Via Filename

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-18548 · ADVISORY
• ajenti/ajenti · PACKAGE
• pypa/advisory-database · WEB
• numanozdemir.com/ajenti-xss.txt · WEB
• exploit-db.com/exploits/45691 · WEB
• packetstormsecurity.com/files/149898/AjentiCP-1.2.23.13-Cross-Site-Scripting.html · WEB
• exploit-db.com/exploits/45691 · Third Party Advisory
• GitHub Advisory GHSA-5pcv-m8w2-62m9 · ADVISORY

ajenti의 다른 취약점

• CVE-2014-4301보통 4.3Multiple cross-site scripting (XSS) vulnerabilities in the respond_error function in routing.py in Eugene Pankov Ajenti before 1.2.21.7 allo…
• CVE-2014-2260낮음 3.5Cross-site scripting (XSS) vulnerability in plugins/main/content/js/ajenti.coffee in Eugene Pankov Ajenti 1.2.13 allows remote authenticated…