CVE-2017-9414

Description

References

• hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt · Exploit
• packetstormsecurity.com/files/142796/Subsonic-6.1.1-Persistent-XSS.html · Exploit
• exploit-db.com/exploits/42120 · Exploit

Mais vulnerabilidades de subsonic

• CVE-2018-20228ALTO 8.0Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.
• CVE-2018-9282MÉDIO 6.1An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the a…
• CVE-2018-14691MÉDIO 6.1An issue was discovered in Subsonic 6.1.1. The music tags feature is affected by three stored cross-site scripting vulnerabilities in the c0…
• CVE-2018-14690MÉDIO 6.1An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title…
• CVE-2018-14689MÉDIO 6.1An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the …