CVE-2018-5331

Discuz! DiscuzX X3.4 has XSS via the view parameter to include/space/space_poll.php, as demonstrated by a mod=space do=poll request to home.php.
References
Link Resource
http://www.whsgwl.net/text.php?textid=32 Exploit Technical Description
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:discuz:discuzx:x3.4:*:*:*:*:*:*:*

Information

Published : 2018-01-10 01:29

Updated : 2018-01-29 11:14


NVD link : CVE-2018-5331

Mitre link : CVE-2018-5331


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

discuz

  • discuzx