CVE-2017-18639

MEDIUM

Sitefinity CMS 9.2 - Cross-Site Scripting

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-18639 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

Progress Sitefinity CMS before 10.1 allows XSS via /Pages Parameter : Page Title, /Content/News Parameter : News Title, /Content/List Parameter : List Title, /Content/Documents/LibraryDocuments/incident-request-attachments Parameter : Document Title, /Content/Images/LibraryImages/newsimages Parameter : Image Title, /Content/links Parameter : Link Title, /Content/links Parameter : Link Title, or /Content/Videos/LibraryVideos/default-video-library Parameter : Video Title.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBSitefinity CMS 9.2 - Cross-Site ScriptingExploitDB exploitby Pralhad ChaskarNot analyzed1 file
ExploitDB
PoC details

References

2