CVE-2018-18734

Description

References

• AvaterXXX/catfish · Exploit

catfish cms 的其他漏洞

• CVE-2021-45018中危 6.1Cross Site Scripting (XSS) vulnerability exists in Catfish <=6.3.0 via a Google search in url:/catfishcms/index.php/admin/Index/addmenu.html…
• CVE-2021-45017高危 8.8Cross Site Request Forgery (CSRF) vulnerability exits in Catfish <=6.1.* when you upload an html file containing CSRF on the website that us…
• CVE-2020-23962中危 6.1A cross site scripting (XSS) vulnerability in Catfish CMS 4.9.90 allows attackers to execute arbitrary web scripts or HTML via a crafted pay…
• CVE-2018-18733中危 5.4An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999.
• CVE-2018-13999中危 4.8Catfish CMS v4.7.9 allows XSS via the admin/Index/write.html editorValue parameter (aka an article posted by an administrator).