Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-15365. PoCs published by nixwizard.
AI-analyzed exploit summary This repository contains a proof-of-concept for a reflected XSS vulnerability in Trend Micro Deep Discovery Inspector 3.8. The exploit demonstrates how an authenticated user can be tricked into executing arbitrary JavaScript, leading to CSRF token theft and potential admin account creation.
Description
A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow an attacker to bypass CSRF protection and conduct an attack on vulnerable installations. An attacker must be an authenticated user in order to exploit the vulnerability.
Exploits (1)
This repository contains a proof-of-concept for a reflected XSS vulnerability in Trend Micro Deep Discovery Inspector 3.8. The exploit demonstrates how an authenticated user can be tricked into executing arbitrary JavaScript, leading to CSRF token theft and potential admin account creation.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N