exploit-
intel
Search
Blog
Stats
Labs
Tools
Tools
EIP CLI Search Tool
EIP MCP Server
EIP REST API
API Rate Limits
About
About
About Exploit Intel
About Exploit Forge
Privacy Policy
RSS Feeds
Blog Posts
Recent CVEs
CVEs with Exploits
CISA KEV
Theme
Color Theme
Cyan
Amber
Milw0rm
Light Warm
Paper
Navy
Search
Blog
Statistics
Labs
Tools
EIP CLI Search Tool
EIP MCP Server
EIP REST API
API Rate Limits
About
About Exploit Forge
Privacy
Exploit Database
Researchers
CWE Categories
Vendors
Ecosystems
RSS Feeds
Blog Posts
Recent CVEs
CVEs with Exploits
CISA KEV
Follow:
Theme:
Home
/
Researchers
/
Nilesh Sapariya
Nilesh Sapariya
2
exploits
Active since Mar 2018
CVE-2018-8903
EXPLOITDB
MEDIUM
text
WORKING POC
Open-audit - XSS
Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.
CVSS 5.4
View Code
CVE-2018-8979
EXPLOITDB
HIGH
text
WORKING POC
Open-audit - CSRF
Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.
CVSS 8.8
View Code