Design/Logic Flaw

JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter...

CVE-2018-20528

The CVE-2018-20528 entry affects JEECMS 9 and describes a Server-Side Request Forgery (SSRF) via the ueditor/getRemoteImage.jspx upfile parameter. Connected records confirm the vulnerability is centered on JEECMS 9 and the SSRF condition in the upfile parameter, with an impact that includes Parti...

YUNUCMS Arbitrary File Deletion Vulnerability

YUNUCMS is China Yunyou YUNU network technology company of a set of open source enterprise station building content management system CMS. A security vulnerability exists in the statics/ueditor/php/vendor/Local.class.php file in YUNUCMS version 1.1.5. An attacker can exploit this vulnerability by...

UEditor SSRF漏洞(JSP版本)分析与复现

作者： 浮萍@猎户安全实验室 公众号：猎户安全实验室 前些时间测试的时候遇到了一个系统采用了UEditor编辑器，版本为1.4.3。已知该编辑器v1.4.3版本存在SSRF漏洞，虽然是Bool型的SSRF，除了可以进行内网探测外，也可以根据web应用指纹信息，之后进行进一步的测试。 0x01 前言 查看官方的更新日志可以发现UEditor编辑器在版本1.4.3.1修复了SSRF漏洞。...

Onethink Ueditor Server-Side Request Forgery Vulnerability

Onethink is a content management framework for web development based on ThinkPHP.Ueditor is one of the HTML editors. A server-side request forgery vulnerability exists in the getRemoteImage.php file of Ueditor in Onethink version 1.0 and 1.1. A remote attacker can exploit this vulnerability with...

CVE-2017-14323

SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...

CVE-2017-14323

SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...

Server side request forgery (ssrf)

SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...

CVE-2017-14323

SSRF Server Side Request Forgery in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigger remote command execution via the upfile parameter...

CVE-2017-14323

CVE-2017-14323 describes a Server-Side Request Forgery (SSRF) in Onethink’s Ueditor component, specifically in getRemoteImage.php used by Onethink V1.0 and V1.1. An attacker can use the upfile parameter to fetch or reach internal network resources and, per sources, potentially trigger remote comm...

Onethink CMS Server Side Request Forgery Vulnerability

Onethink CMS versions released up to date 2018/04/06 suffer from a server-side request forgery vulnerability. SSRFPS"Server Side Request ForgeryPSc in Onethink All version CVE-2017-14323 The Onethink is an open source CMSContent Management System.This system is based on the Thinkphp3.2 developmen...

Baidu UEditor Cross-Site Scripting Vulnerability

Baidu UEditor is China's Baidu Baidu company's set of open source HTML editor . A cross-site scripting vulnerability exists in Baidu UEditor version 1.4.3.3. A remote attacker can leverage the SRC attribute of the IFRAME element to inject arbitrary web script or HTML...

Design/Logic Flaw

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element...

CVE-2017-14744

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element...

CVE-2017-14744

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element...

CVE-2017-14744

UEditor 1.4.3.3 has XSS via the SRC attribute of an IFRAME element...

CVE-2017-14744

UEditor 1.4.3.3 is vulnerable to cross-site scripting via the SRC attribute of an IFRAME element. The issue is documented across multiple sources (NVD, CNVD, Red Hat, CVE lists) and is consistently described as an XSS in Baidu/UEditor, with no explicit remediation or patch version provided in the...

File upload vulnerability in Ueditor editor .net version

UEditor is developed by Baidu web front-end R & D WYSIWYG rich text web editor , with lightweight , customizable , focus on user experience and other features . The .net version of Ueditor editor has an arbitrary file upload vulnerability, which allows attackers to upload files in a...

UEditor cross-site scripting vulnerability

No description provided by source...

Stored XSS Vulnerability in Full Version of UEditor

UEditor is developed by Baidu web front-end R & D Department of WYSIWYG rich text web editor . A stored XSS vulnerability exists in all versions of UEditor. An attacker can exploit this vulnerability to execute javascript code in a file...