CVE-2018-8903

Mô tả

Tham khảo

• nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html · Exploit
• exploit-db.com/exploits/44354 · Exploit

Lỗ hổng khác của open-audit

• CVE-2018-9137TRUNG BÌNH 6.8Open-AudIT before 2.2 has CSV Injection.
• CVE-2018-9155TRUNG BÌNH 5.4Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2018-8937TRUNG BÌNH 6.1An issue was discovered in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /l…
• CVE-2018-8979CAO 8.8Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.
• CVE-2018-8978TRUNG BÌNH 5.4Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.