CVE-2018-20637

Mô tả

Tham khảo

• gkaim.com/cve-2018-20637-vikas-chaudhary · Exploit

Lỗ hổng khác của auditor website project

• CVE-2019-7553TRUNG BÌNH 5.4PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has Stored XSS in the Profile Update page via the My Name field.
• CVE-2018-20638TRUNG BÌNH 6.5PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has directory traversal via a direct request for a listing of an image directo…
• CVE-2018-20636TRUNG BÌNH 5.4PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has HTML injection via the First Name field.
• CVE-2018-15186CAO 8.8PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.1 has CSRF via client/auditor/updprofile.php.
• CVE-2018-13256TRUNG BÌNH 6.1PHP Scripts Mall Auditor Website 2.0.1 has XSS via the lastname or firstname parameter.