Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2018-16780

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Complete Responsive CMS Blog是一套基于PHP和MySQL的博客系统。 Complete Responsive CMS Blog 2018-05-20及之前版本中的日志评论界面存在跨站脚本漏洞。远程攻击者可借助评论利用该漏洞注入任意的Web脚本，获取其他用户cookies并登录其他用户账户。

AI Predicted 6.1 Difficulty: Easy EPSS 0.48% · P40
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-16780

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Complete Responsive CMS Blog through 2018-05-20 has XSS via a comment.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Complete Responsive CMS Blog 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Complete Responsive CMS Blog是一套基于PHP和MySQL的博客系统。 Complete Responsive CMS Blog 2018-05-20及之前版本中的日志评论界面存在跨站脚本漏洞。远程攻击者可借助评论利用该漏洞注入任意的Web脚本，获取其他用户cookies并登录其他用户账户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2018-16780

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-16780

请登录查看更多情报信息。

Other References for CVE-2018-16780 (1)

Same Patch Batch · n/a · 2018-09-10 · 27 CVEs total

CVE-2018-16767 WAVM 缓冲区错误漏洞
CVE-2018-16782 ImageWorsener 缓冲区错误漏洞
CVE-2018-16781 ffjpeg 输入验证错误漏洞
CVE-2018-16779 BlogCMS 跨站脚本漏洞
CVE-2018-16776 Creatiwity wityCMS 跨站脚本漏洞
CVE-2018-16775 Victor CMS 跨站脚本漏洞
CVE-2018-16774 HongCMS 安全漏洞
CVE-2018-16773 EasyCMS 跨站脚本漏洞
CVE-2018-16772 Hoosk 跨站脚本漏洞
CVE-2018-16771 Hoosk 安全漏洞
CVE-2018-16770 WAVM 输入验证错误漏洞
CVE-2018-16769 WAVM 缓冲区错误漏洞
CVE-2018-16768 WAVM 缓冲区错误漏洞
CVE-2018-16805 b3log Solo 跨站脚本漏洞
CVE-2018-16766 WAVM 输入验证错误漏洞
CVE-2018-16765 WAVM 缓冲区错误漏洞
CVE-2018-16764 WAVM 安全漏洞
CVE-2018-16790 MongoDB mongo-c-driver libbson 缓冲区错误漏洞
CVE-2018-16797 PotPlayer 缓冲区错误漏洞
CVE-2018-16608 Monstra CMS 安全漏洞

Showing top 20 of 27 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2018-16780

No comments yet

Leave a comment