CVE-2018-5292

Description

References

• d4wner/Vulnerabilities-Report · Exploit
• wordpress.org/support/topic/xss-lfi-bugs-at-the-latest-version-of-gd-rating-system · Broken Link
• wpvulndb.com/vulnerabilities/8995 · Third Party Advisory

gd rating system 的其他漏洞

• CVE-2018-5293中危 6.1The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-tools page.
• CVE-2018-5291高危 7.5The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-too…
• CVE-2018-5290高危 7.5The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-tra…
• CVE-2018-5289高危 7.5The GD Rating System plugin 2.3 for WordPress has Directory Traversal in the wp-admin/admin.php panel parameter for the gd-rating-system-inf…
• CVE-2018-5288中危 6.1The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page.