Showing 1 - 2 of 2

CVE-2018-11564

Status Candidate

Overview

Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website pointing to "/storage/poc.svg" that will point to http://localhost/pagekit/storage/poc.svg. When a user comes along to click that link, it will trigger a XSS attack.

Related Files

Pagekit Cross Site Scripting Code Generator: Posted Jun 5, 2018; Authored by DEEPIN2; Pagekit versions prior to 1.0.13 suffer from a cross site scripting vulnerability.; tags | exploit, xss; advisories | CVE-2018-11564; SHA-256 | 2b8404ce71950c6f51a9c3a533696cae704a6b32c473193a05a3fd033cf9f6bb; Download | Favorite | View

PageKit CMS 1.0.13 Cross Site Scripting: Posted May 31, 2018; Authored by Jason Perry; PageKit CMS version 1.0.13 suffers from a cross site scripting vulnerability.; tags | exploit, xss; advisories | CVE-2018-11564; SHA-256 | 159b4f9b84d35d3f6a1f5d3bf55f4ab55a5d7c9402cba628709a4c7655460b17; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days

Red Hat 249 files
Jay Turla 150 files
indoushka 147 files
Ubuntu 62 files
h00die 54 files
juan vazquez 43 files
sinn3r 41 files
H D Moore 31 files
Karn Ganeshen 23 files
Pedro Ribeiro 22 files

File Archives

Systems

AIX (430)
Apple (2,104)
BSD (378)
CentOS (61)
Cisco (1,954)
Debian (7,118)
Fedora (1,693)
FreeBSD (1,247)
Gentoo (4,567)
HPUX (881)
iOS (387)
iPhone (108)
IRIX (220)
Juniper (71)
Linux (51,071)
Mac OS X (696)
Mandriva (3,105)
NetBSD (256)
OpenBSD (489)
RedHat (16,733)
Slackware (941)
Solaris (1,615)
SUSE (1,444)
Ubuntu (9,808)
UNIX (9,452)
UnixWare (188)
Windows (6,763)
Other

CVE-2018-11564

Overview

Related Files

File Archive:

September 2024

Top Authors In Last 30 Days

File Tags

File Archives

Systems