CVE-2018-3238 PoC — Oracle Fusion Middleware WebCenter Sites组件安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-3238.yaml

Associated Vulnerability

Title:Oracle Fusion Middleware WebCenter Sites组件安全漏洞 (CVE-2018-3238)
Description:Oracle Fusion Middleware（Oracle融合中间件）是美国甲骨文（Oracle）公司的一套面向企业和云环境的业务创新平台。WebCenter Sites是其中的一个Web体验管理组件，它可让营销人员和业务用户在全球范围内跨多个渠道创建和管理互动式社交在线体验，以提升销量和客户忠诚度。 Oracle Fusion Middleware中的WebCenter Sites组件11.1.1.8.0版本的Advanced UI子组件存在安全漏洞。攻击者可利用该漏洞未授权访问、更新、插入或删除数

Description

The Oracle WebCenter Sites 11.1.1.8.0 component of Oracle Fusion Middleware is impacted by easily exploitable cross-site scripting vulnerabilities that allow high privileged attackers with network access via HTTP to compromise Oracle WebCenter Sites.

File Snapshot


 id: CVE-2018-3238

info:
  name: Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 - Cross-Site Sc

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!