Lucene search
Subrion CMS 4.2.1 - Cross-Site Scripting
Subrion CMS 4.2.1 XSS using CKEdito
Show more
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Subrion CMS 4.2.1 - Cross-Site Scripting Vulnerability | 6 Aug 201800:00 | – | zdt |
 | Subrion CMS 4.2.1 Cross Site Scripting | 21 Aug 201800:00 | – | packetstorm |
| Subrion CMS 4.2.1 Cross Site Scripting | 6 Aug 201800:00 | – | packetstorm |
 | Cross-site Scripting (XSS) | 3 Aug 201805:21 | – | veracode |
 | Subrion CMS Cross-site Scripting | 14 May 202202:00 | – | github |
 | Subrion CMS Cross-site Scripting | 14 May 202202:00 | – | osv |
 | Cross site scripting | 2 Aug 201801:29 | – | prion |
 | CVE-2018-14840 | 2 Aug 201801:29 | – | nvd |
 | CVE-2018-14840 | 2 Aug 201801:29 | – | cve |
 | Subrion CMS 4.2.1 - Cross-Site Scripting | 6 Aug 201800:00 | – | exploitpack |
10
# Exploit Title: [Subrion CMS- 4.2.1 XSS (Using component with known
Vulnerability)]
# Date: [02-08-2018]
# Exploit Author: [Zeel Chavda]
# Vendor Homepage: [https://subrion.org/]
# Software Link: [https://subrion.org/download/]
# Version: [4.2.1] (REQUIRED)
# Tested on: [Windows,FireFox]
# CVE : [CVE-2018-14840]
Steps: -
1. Create a file with XSS payload.
2. Save it with .html extension.
3. Upload via CKEditor manager and execute "file.html".
Reference: -
https://github.com/intelliants/subrion/commit/cb10ac2294cb2c3a6d2159f9a2bb8c58a2a10a47Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo06 Aug 2018 00:00Current
6.3Medium risk
Vulners AI Score6.3
CVSS36.1
EPSS0.003