CVE-2018-18419

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• User Management 1.1 - Cross-Site Scripting2018-10-25 · webapps · php

Impact

Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/149850/User-Management-1.1-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/45686/
• http://packetstormsecurity.com/files/149850/User-Management-1.1-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/45686/