7 matches found
CVE-2018-11564
creationtimestamp| type| source ---|---|--- 2022-05-14 03:14:51+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-3rwj-v7jp-w542 2024-04-25 22:03:01+00:00| published-proof-of-concept| https://t.me/arpsyndicate/4876...
Pagekit < 1.0.13 - Cross-Site Scripting Code Generator Exploit
Exploit for php platform in category web applications Title: Pagekit ' + code + '' f = openname, 'w+' f.writecode f.close if name == 'main': print''' / \ \ / / | | \ / / | / / | | / / | || | | | \ \ / /| | | | | | |/ \ | | | | ' | || | | | \ V / | ||/ /| || | | || | | | | | | / || ||/||/...
Pagekit < 1.0.13 - Cross-Site Scripting Code Generator
Title: Pagekit ' + code + '' f = openname, 'w+' f.writecode f.close if name == 'main': print''' / \ \ / / | | \ / / | / / | | / / | || | | | \ \ / /| | | | | | |/ \ | | | | ' | || | | | \ V / | ||/ /| || | | || | | | | | | / || ||/||/ |||/ / || Author : DEEPIN2Junseo Lee''' print' enter...
Pagekit Cross Site Scripting Code Generator
Title: Pagekit ' + code + '' f = openname, 'w+' f.writecode f.close if name == 'main': print''' / \ \ / / | | \ / / | / / | | / / | || | | | \ \ / /| | | | | | |/ \ | | | | ' | || | | | \ V / | ||/ /| || | | || | | | | | | / || ||/||/ |||/ / || Author : DEEPIN2Junseo Lee''' print' enter...
CVE-2018-11564
Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user...
CVE-2018-11564
CVE-2018-11564 affects PageKit/YOOtheme Pagekit ≤ 1.0.13. A stored XSS occurs when a privileged user uploads an SVG image via the picture upload feature; the file is not stripped/filtered. An attacker can then craft a link to “/storage/poc.svg” that, when clicked by another user, triggers XSS. Co...
PageKit CMS 1.0.13 Cross Site Scripting
CVE ID: CVE-2018-11564 Stored XSS in PageKit CMS 1.0.13 allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The...