Published: 01/06/2018 Updated: 03/07/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

servlet/UserServlet in SearchBlox 8.6.6 has CSRF via the u_name, u_passwd1, u_passwd2, role, and X-XSRF-TOKEN POST parameters because of CSRF Token Bypass.

Vulnerable Product	Search on Vulmon	Subscribe to Product
searchblox searchblox 8.6.6

Check Point Reference: CPAI-2018-2730 Date Published: 28 Mar 2024 Severity: High ...

# Exploit Title: CSRF Privilege Escalation (Creation of an administrator account) on SearchBlox 866 # Exploit Author: Canberk BOLAT, Ahmet GÜREL # Software Link: wwwsearchbloxcom/ # Version: < = SearchBlox Version 866 # Platform: Java # Tested on: Windows # CVE: CVE-2018-11538 # 1 DETAILS Using Cross-Site Request Forgery (CSRF) ...

SearchBlox version 866 suffers from a cross site request forgery vulnerability ...

CWE-352 https://www.exploit-db.com/exploits/44801/https://gurelahmet.com/cve-2018-11538-csrf-privilege-escalation-creation-of-an-administrator-account-on-searchblox-8-6-6/http://packetstormsecurity.com/files/147977/SearchBlox-8.6.6-Cross-Site-Request-Forgery.html https://nvd.nist.gov https://www.exploit-db.com/exploits/44801/https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2018-2730.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-11538

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect