dnr6419/CVE-2018-6905

PoC

typo3 install.php XSS

view exploit source poc_in_githubauthor dnr6419published 2021-06-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-6905US	medium4.8	2.17% (82nd)	Exploit	2018-04-08
The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the i…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.