PT-2019-8780 · Monstra · Monstra Cms

Awilum · Publicado 2019-07-03 · Atualizado 2019-07-08 · CVE-2018-11227

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Monstra CMS versions 3.0.4 and earlier

Description The issue is related to a security problem where an attacker can execute malicious scripts. This is achieved through the index.php file, allowing for potential data theft or unauthorized actions.

Recommendations For Monstra CMS versions 3.0.4 and earlier, update to a version later than 3.0.4 to resolve the issue.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-11227

Produtos afetados

Monstra Cms

Referências · 5

• 🔥 https://exploit-db.com/exploits/44646 · Exploit
• https://github.com/monstra-cms/monstra/issues/438 · Nota
• https://github.com/monstra-cms/monstra/issues · Nota
• https://osv.dev/vulnerability/CVE-2018-11227 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-11227 · Nota de Segurança