CVE-2018-9997

Related Files

Open-Xchange OX Guard Cross Site Scripting / Signature Validation

Posted Aug 16, 2019

Authored by Hanno Boeck, Juraj Somorovsky, Martin Heiland, Jorg Schwenk, Sebastian Schinzel, Damian Poddebniak, Jens Muller, Marcus Brinkmann

Open-Xchange OX Guard versions 7.10.2 and below suffer from a cross site scripting vulnerability. Open-Xchange OX Guard versions 7.10.1 and below, 2.10.2 and below suffer from a signature validation vulnerability.

tags | exploit, xss

advisories | CVE-2018-9997, CVE-2019-11521

SHA-256 | ea4821effec5ebd51f45bdf732d362fc22eb10a99a7363c2441cceeedc97dfae

Download | Favorite | View

OX App Suite 7.8.4 XSS / XML Injection / Information Disclosure

Posted Jul 2, 2018

Authored by Secator, Michael Reizelman, Antonio

OX App Suite version 7.8.5 suffers from XML external entity injection, information disclosure, and cross site scripting vulnerabilities.

tags | exploit, vulnerability, xss, info disclosure

advisories | CVE-2018-9997, CVE-2018-9998

SHA-256 | c70d8220abd64fcb08a298d9510add6aeba463a05de8fedbb79e7b7f24e8956b

Download | Favorite | View