PT-2018-13722 · Easycms · Easycms

Sqlsec · Publicado 2018-09-09 · Atualizado 2018-11-07 · CVE-2018-16759

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions EasyCMS version 1.4

Description The issue concerns the removeXSS function in EasyCMS, which is vulnerable to XSS attacks via an onhashchange event. This is due to the function's inadequate handling of certain events, allowing malicious scripts to be executed.

Recommendations For EasyCMS version 1.4, consider modifying the removeXSS function in App/Common/common.php to properly handle onhashchange events and prevent XSS attacks. As a temporary workaround, consider disabling the removeXSS function until a patch is available. Restrict access to the SearchAction.class.php module to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-16759

Produtos afetados

Easycms

Referências · 3

• 🔥 https://github.com/teameasy/EasyCMS/issues/4 · Exploit
• https://osv.dev/vulnerability/CVE-2018-16759 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-16759 · Nota de Segurança