EDB-42978
PoCOctoberCMS 1.0.425 (Build 425) - Cross-Site Scripting
view exploit source exploit_dbtype webappsauthor Ishaq Mohammedpublished 2017-10-12catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-15284US | medium5.4 | Exploit | ||
Cross-Site Scripting exists in OctoberCMS 1.0.425 (aka Build 425), allowing a least privileged user to upload an SVG file containing malicious code as the Avatar for the profile. W… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan