CVE-2018-12519
Public Exploits 1
ExploitDB · 1 EDB-44978 [webapps]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-12519
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ShopNx 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ShopNx是一款用AngularJS、NodeJS和MongoDB创建的购物网站单页应用程序。 ShopNx 2017-11-17及之前版本中存在安全漏洞，该漏洞源于程序没有充分过滤用户提交的输入。远程攻击者可利用该漏洞上传带有JavaScript载荷的恶意HTML文件，从而窃取用户的凭证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-12519
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-12519
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2018-12519 (2)
- https://cxsecurity.com/issue/WLB-2018060185x_refsource_MISC
Same Patch Batch · n/a · 2018-06-19 · 44 CVEs total
| CVE-2018-11704 | FastStone Image Viewer 安全漏洞 | |
| CVE-2018-11707 | FastStone Image Viewer 安全漏洞 | |
| CVE-2018-11706 | FastStone Image Viewer 安全漏洞 | |
| CVE-2018-12557 | Zuul 安全漏洞 | |
| CVE-2018-12561 | Cantata cantata-mounter D-Bus服务安全漏洞 | |
| CVE-2018-12562 | Cantata cantata-mounter D-Bus服务器安全漏洞 | |
| CVE-2018-12563 | Linaro LAVA 安全漏洞 | |
| CVE-2018-12564 | Linaro LAVA 安全漏洞 | |
| CVE-2018-12565 | Linaro LAVA 安全漏洞 | |
| CVE-2018-12560 | Cantata cantata-mounter D-Bus服务安全漏洞 | |
| CVE-2018-11705 | FastStone Image Viewer 安全漏洞 | |
| CVE-2018-11703 | FastStone Image Viewer 安全漏洞 | |
| CVE-2018-11702 | FastStone Image Viewer 安全漏洞 | |
| CVE-2018-11701 | FastStone Image Viewer 安全漏洞 | |
| CVE-2018-12578 | sam2p 缓冲区错误漏洞 | |
| CVE-2018-12580 | DragonByte vBSecurity for vBulletin 跨站脚本漏洞 | |
| CVE-2018-12583 | AKCMS 跨站请求伪造漏洞 | |
| CVE-2018-12582 | AKCMS 跨站请求伪造漏洞 | |
| CVE-2018-8727 | Mirasys DVMS Workstation Gateway 路径遍历漏洞 | |
| CVE-2018-6210 | D-link DIR-620 安全漏洞 |
Showing top 20 of 44 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-12519
No comments yet