CVE-2018-9120

Description

References

• seekurity.com/blog/general/multiple-cross-site-scripting-vulnerabilities-in-crea8social-social-network-script · Exploit
• youtube.com/watch · Exploit

crea8social 的其他漏洞

• CVE-2018-9123中危 5.4In Crea8social 2018.2, there is Stored Cross-Site Scripting via a User Profile.
• CVE-2018-9122中危 5.4In Crea8social 2018.2, there is Reflected Cross-Site Scripting via the term parameter to the /search URI.
• CVE-2018-9121中危 5.4In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment.
• CVE-2015-1054低危 3.5Cross-site scripting (XSS) vulnerability in the Games feature in Crea8Social 2.0 allows remote authenticated users to inject arbitrary web s…