PT-2018-17469 · Wbce · Wbce Cms

Publicado 2018-01-25 · Atualizado 2018-02-08 · CVE-2018-6313

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WBCE CMS version 1.3.1

Description The issue concerns cross-site scripting (XSS) that allows remote authenticated administrators to inject arbitrary web script or HTML. This is achieved via the Modify Page screen.

Recommendations For WBCE CMS version 1.3.1, update to a version that contains a fix for this issue to prevent remote authenticated administrators from injecting arbitrary web script or HTML via the Modify Page screen.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-6313

Produtos afetados

Wbce Cms

Referências · 3

• 🔥 https://github.com/imsebao/404team/blob/master/wbce_cms_xss.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6313 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6313 · Aviso do Fabricante