CVE-2018-7547: XSS

Q: What access and interaction are required to exploit this issue?

An attacker needs high privileges and must be able to submit a value for config[WEB_SITE_TITLE] to the administrative groupsave endpoint. Exploitation also requires a user to interact with the injected content.

Q: Which component and input should administrators prioritize when investigating exposure?

Review the Lyadmin 1.x administrative configuration workflow, specifically requests to /admin.php?s=/admin/config/groupsave.html that set config[WEB_SITE_TITLE]. Check the stored site-title value for unexpected script content.

Published Feb 27, 2018

Updated

lyadmin 1.x has XSS via the config[WEBSITETITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.

Affected Software

1 affected component

Lingyun Lyadmin>=1.0.0<=1.2.0

Event History

Feb 27, 2018

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Data Sourced

via NVD·09:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access and interaction are required to exploit this issue?

An attacker needs high privileges and must be able to submit a value for config[WEB_SITE_TITLE] to the administrative groupsave endpoint. Exploitation also requires a user to interact with the injected content.

Which component and input should administrators prioritize when investigating exposure?

Review the Lyadmin 1.x administrative configuration workflow, specifically requests to /admin.php?s=/admin/config/groupsave.html that set config[WEB_SITE_TITLE]. Check the stored site-title value for unexpected script content.

CVE-2018-7547: XSS

Affected Software

Event History

Frequently Asked Questions

What access and interaction are required to exploit this issue?

Which component and input should administrators prioritize when investigating exposure?

Company

Resources

Contact

Frequently Asked Questions

What access and interaction are required to exploit this issue?

Which component and input should administrators prioritize when investigating exposure?