Lucene search
Ali Abdollahi1337DAY-ID-31349HistoryOct 16, 2018 - 12:00 a.m.
HighPortal 12.5 Cross Site Scripting Vulnerability
2018-10-1600:00:00
Ali Abdollahi
0day.today
25
0.012 Low
EPSS
Percentile
85.1%
Exploit for php platform in category web applications
Vulnerable Product: HighPortal
Affected version: 12.5
Vulnerability Type: XSS
CVE: CVE-2018-17964
CWE: CWE-79
Credit: Ali Abdollahi
Remote: Yes
Description:XSS vulnerability on Aryanic HighPortal version 12.5 via an Add Tags action.Contact: https://twitter.com/aliabdollahi2
References: - https://example.com/directory.php?id=51622199%3Cscript%3Ealert(1)%3C/script%3E&page=something.php- http://i63.tinypic.com/30mofax.png
# 0day.today [2018-10-18] #Related
prion
prion
Design/Logic Flaw
2019-01-24 04:29:00
cve
cve
CVE-2018-17694
2019-01-24 04:29:04
zdi
zdi
Foxit PhantomPDF display Use-After-Free Remote Code Execution Vulnerability
2018-10-11 00:00:00
cvelist
cvelist
CVE-2018-17694
2019-01-24 04:00:00
nvd
nvd
CVE-2018-17694
2019-01-24 04:29:04
packetstorm
packetstorm
HighPortal 12.5 Cross Site Scripting
2018-10-16 00:00:00
openvas
openvas