PT-2018-15465 · Ucms · Ucms

Publicado 2018-12-30 · Atualizado 2019-01-04 · CVE-2018-20601

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions UCMS version 1.4.7

Description The issue allows for XSS via the description parameter in the "list editpost" action of index.php.

Recommendations For version 1.4.7, avoid using the description parameter in the vulnerable index.php list editpost action until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-20601

Produtos afetados

Ucms

Referências · 3

• 🔥❌ https://github.com/AvaterXXX/CVEs/blob/master/ucms.md#xss3 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2018-20601 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-20601 · Nota de Segurança