CVE-2017-17649

Description

References

• packetstormsecurity.com/files/145438/Readymade-Video-Sharing-Script-3.2-HTML-Injection.html · Exploit
• exploit-db.com/exploits/43333 · Exploit

Mais vulnerabilidades de readymade video sharing script

• CVE-2017-17893MÉDIO 6.1Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edi…
• CVE-2017-17892CRÍTICO 9.8Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.
• CVE-2017-17891ALTO 8.8Readymade Video Sharing Script has CSRF via user-profile-edit.php.
• CVE-2017-17627CRÍTICO 9.8Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.