CVE-2018-9137

Description

References

• community.opmantek.com/display/OA/Errata+-+2.1+Security+Update%2C+April+2018 · Exploit
• exploit-db.com/exploits/44511 · Exploit

open-audit의 다른 취약점

• CVE-2018-9155보통 5.4Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2018-8937보통 6.1An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /l…
• CVE-2018-8979높음 8.8Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.
• CVE-2018-8978보통 5.4Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.
• CVE-2018-8903보통 5.4Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.