CVE-2017-17649

Description

References

• packetstormsecurity.com/files/145438/Readymade-Video-Sharing-Script-3.2-HTML-Injection.html · Exploit
• exploit-db.com/exploits/43333 · Exploit

readymade video sharing script 的其他漏洞

• CVE-2017-17893中危 6.1Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edi…
• CVE-2017-17892严重 9.8Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.
• CVE-2017-17891高危 8.8Readymade Video Sharing Script has CSRF via user-profile-edit.php.
• CVE-2017-17627严重 9.8Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.