CVE-2018-17996

Mô tả

Tham khảo

• packetstormsecurity.com/files/151694/LayerBB-1.1.2-Cross-Site-Request-Forgery.html · Exploit
• AndyRixon/LayerBB · Patch
• AndyRixon/LayerBB · Exploit
• exploit-db.com/exploits/46379 · Exploit

Lỗ hổng khác của layerbb

• CVE-2019-16531CAO 8.8LayerBB before 1.1.4 has multiple CSRF issues, as demonstrated by changing the System Settings via admin/general.php.
• CVE-2019-13974CAO 8.8LayerBB 1.1.3 allows conversations.php/cmd/new CSRF.
• CVE-2019-13973NGHIÊM TRỌNG 9.8LayerBB 1.1.3 allows admin/general.php arbitrary file upload because the custom_logo filename suffix is not restricted, and .php may be used…
• CVE-2019-13972TRUNG BÌNH 6.1LayerBB 1.1.3 allows XSS via the application/commands/new.php pm_title variable, a related issue to CVE-2019-17997.
• CVE-2018-17997TRUNG BÌNH 6.1LayerBB 1.1.1 allows XSS via the titles of conversations (PMs).