PT-2018-17810 · Php Scripts Mall · Php Scripts Mall Image Sharing Script

Publicado 2018-04-12 · Atualizado 2018-05-11 · CVE-2018-6902

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Image Sharing Script version 1.3.3

Description The issue concerns a problem where an attacker can inject malicious code via the Full Name field in an Edit Profile action, potentially leading to unauthorized actions on the affected system.

Recommendations For PHP Scripts Mall Image Sharing Script version 1.3.3, consider validating and sanitizing user input in the Full Name field to prevent code injection. As a temporary workaround, restrict access to the Edit Profile action until a proper fix is applied.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-6902

Produtos afetados

Php Scripts Mall Image Sharing Script

Referências · 3

• 🔥 https://0day4u.wordpress.com/2018/03/12/image-sharing-script-stored-xss · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6902 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-6902 · Aviso do Fabricante