CVE-2018-8979

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Open-AuditIT Professional 2.1 - Cross-Site Request Forgery2018-03-30 · webapps · multiple

Impact

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html
• https://www.exploit-db.com/exploits/44360/
• https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html
• https://www.exploit-db.com/exploits/44360/