CVE-2018-17408
Public Exploits 3
Metasploit · 1 zahir_enterprise_plus_csv.rb [exploit]
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-17408
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute arbitrary code via a crafted CSV file that is accessed through the Import CSV File menu.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Zahir Accounting Enterprise Plus 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Zahir Accounting Enterprise Plus是一套ERP（企业资源计划）软件。该软件具有营销管理、生产管理、物流管理和财务管理等功能。 Zahir Accounting Enterprise Plus 6 build 10b及之前版本中存在基于栈的缓冲区越界读取漏洞。远程攻击者可借助特制的CSV文件利用该漏洞执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2018-17408
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-17408
请登录查看更多情报信息。
- https://blog.spentera.id/zahir-accounting-enterprise-plus-6/x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2018-17408
Same Patch Batch · n/a · 2018-10-03 · 25 CVEs total
| CVE-2018-17054 | Progress Sitefinity CMS Identity Server 跨站脚本漏洞 | |
| CVE-2018-17947 | WordPress Snazzy Maps插件跨站脚本漏洞 | |
| CVE-2018-17946 | WordPress Tribulant Slideshow Gallery插件安全漏洞 | |
| CVE-2018-17942 | Gnulib 缓冲区错误漏洞 | |
| CVE-2018-17938 | Zimbra Collaboration 数据伪造问题漏洞 | |
| CVE-2018-16051 | GitLab 安全漏洞 | |
| CVE-2018-16050 | GitLab 跨站脚本漏洞 | |
| CVE-2018-16049 | GitLab 安全漏洞 | |
| CVE-2018-16048 | GitLab 安全漏洞 | |
| CVE-2018-17967 | ImageMagick 安全漏洞 | |
| CVE-2018-17966 | ImageMagick 安全漏洞 | |
| CVE-2018-17965 | ImageMagick 安全漏洞 | |
| CVE-2018-17972 | Linux kernel 访问控制错误漏洞 | |
| CVE-2018-17053 | Progress Sitefinity CMS Identity Server 跨站脚本漏洞 | |
| CVE-2018-12087 | OPC Foundation UA Client Applications 安全漏洞 | |
| CVE-2018-17969 | Samsung SCX-6545X 安全漏洞 | |
| CVE-2018-17562 | Multi-Tech FaxFinder SQL注入漏洞 | |
| CVE-2018-17553 | Naviwebs Navigate CMS 安全漏洞 | |
| CVE-2018-17552 | Naviwebs Navigate CMS SQL注入漏洞 | |
| CVE-2018-17540 | strongSwan gmp插件缓冲区错误漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2018-17408
No comments yet