Lucene search
GoogleOSV:CVE-2017-15284HistoryOct 12, 2017 - 8:29 a.m.
CVE-2017-15284
2017-10-1208:29:00
Google
osv.dev
1
Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. When this is opened by the Admin, it causes JavaScript execution in the context of the Admin account.
Related
packetstorm
packetstorm
OctoberCMS 1.0.425 Cross Site Scripting
2017-10-12 00:00:00
prion
prion
Cross site scripting
2017-10-12 08:29:00
cve
cve
CVE-2017-15284
2017-10-12 08:29:00
zdt
zdt
OctoberCMS 1.0.425 Cross Site Scripting Vulnerability
2017-10-12 00:00:00
exploitpack
exploitpack
OctoberCMS 1.0.425 (Build 425) - Cross-Site Scripting
2017-10-12 00:00:00
nvd
nvd
CVE-2017-15284
2017-10-12 08:29:00
cvelist
cvelist
CVE-2017-15284
2017-10-12 08:00:00
exploitdb
exploitdb
OctoberCMS 1.0.425 (Build 425) - Cross-Site Scripting
2017-10-12 00:00:00