CVE-2018-11690
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 33%
The Balbooa Gridbox extension version 2.4.0 and previous versions for Joomla! is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context of the hosting Web site, once the URL is clicked. An attacker could use this vulnerability to steal the victim's cookie-based authentication credentials.
Produtos afetados
n/a · n/aReferências
http://packetstormsecurity.com/files/148127/Joomla-2.4.0-Gridbox-Cross-Site-Scripting.htmlhttp://seclists.org/fulldisclosure/2018/Jun/26https://vel.joomla.org/resolved/2155-gridbox-com-gridbox-multiple-vulnerabilitieshttps://vulmon.com/vulnerabilitydetails?qid=CVE-2018-11690http://www.securityfocus.com/archive/1/542066/100/0/threaded