CVE-2018-11538

Mô tả

Tham khảo

• packetstormsecurity.com/files/147977/SearchBlox-8.6.6-Cross-Site-Request-Forgery.html · Exploit
• gurelahmet.com/cve-2018-11538-csrf-privilege-escalation-creation-of-an-administrator-account-on-searchblox-8-6-6 · Exploit
• exploit-db.com/exploits/44801 · Exploit

Lỗ hổng khác của searchblox

• CVE-2020-10132TRUNG BÌNH 6.1SearchBlox before Version 9.1 is vulnerable to cross-origin resource sharing misconfiguration.
• CVE-2020-10131NGHIÊM TRỌNG 9.8SearchBlox before Version 9.2.1 is vulnerable to CSV macro injection in "Featured Results" parameter.
• CVE-2020-10130CAO 8.8SearchBlox before Version 9.1 is vulnerable to business logic bypass where the user is able to create multiple super admin users in the syst…
• CVE-2020-10129CAO 8.8SearchBlox before Version 9.2.1 is vulnerable to Privileged Escalation-Lower user is able to access Admin functionality.
• CVE-2020-10128TRUNG BÌNH 5.4SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox p…