Vulners
Lucene search
Reservo Image Hosting Script 1.5 - Cross-Site Scripting
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Reservo Image Hosting Script 1.5 - Cross-Site Scripting Vulnerability | 17 Jan 201800:00 | – | zdt |
 | Reservo Image Hosting search engine cross-site scripting vulnerability | 26 Jan 201800:00 | – | cnvd |
 | CVE-2018-5705 | 24 Jan 201817:00 | – | cve |
 | CVE-2018-5705 | 24 Jan 201817:00 | – | cvelist |
 | EUVD-2018-17474 | 7 Oct 202500:30 | – | euvd |
 | Reservo Image Hosting Script 1.5 - Cross-Site Scripting | 17 Jan 201800:00 | – | exploitpack |
 | CVE-2018-5705 | 24 Jan 201817:29 | – | nvd |
 | Reservo Image Hosting Script < 1.6.1 XSS Vulnerability | 18 Jan 201800:00 | – | openvas |
 | Reservo Image Hosting Script 1.5 Cross Site Scripting | 17 Jan 201800:00 | – | packetstorm |
 | Design/Logic Flaw | 24 Jan 201817:29 | – | prion |
10
# Exploit Title: Reservo Image Hosting Script 1.5 - Cross Site Scripting
# Date: 15-01-2018
# Exploit Author: Dennis Veninga
# Contact Author: d.veninga [at] networking4all.com
# Vendor Homepage: reservo.co
# Version: 1.6
# CVE-ID: CVE-2018-5705
With support for automatic thumbnails & image resizing in over 200 image
formats, robust privacy options, secure image manager, external storage a
feature rich admin area and free migration scripts, Reservo really does
tick every box.
Reservo Image Hosting is vulnerable to XSS attacks. The affected function
is its search engine. Since there is an user/admin login interface, it's
possible for attackers to steal sessions of users and thus admin(s). By
sending users an infected URL, code will be executed.
---------------------------
---------------------------
PoC:
https://
{{target}}/search/?s=image&t=%27%29%3B%2522%2520style%253D%22%3Cscript%3Ealert%281%29%3C%2Fscript%3E%3C
---------------------------
---------------------------
Evil javascript code can be inserted and will be executed when visiting the
linkData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jan 2018 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS 24.3
CVSS 36.1
EPSS0.00305