CVE-2018-5479

MEDIUM

ImgHosting 1.5 - Cross-Site Scripting

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2018-5479 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its search engine via the search parameter to the default URI. Since there is an user/admin login interface, it's possible for attackers to steal sessions of users and thus admin(s). By sending users an infected URL, code will be executed.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBImgHosting 1.5 - Cross-Site ScriptingExploitDB exploitby Dennis VeningaNot analyzed1 file
ExploitDB
PoC details

References

2