Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.8
CVSSv3

CVE-2018-12519

Published: 19/06/2018 Updated: 13/08/2018
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 405
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Subscribe to Shopnx

Vulnerability Summary

An issue exists in ShopNx through 2017-11-17. The vulnerability allows a remote malicious user to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

codenx shopnx

Exploits

Exploit DB: ShopNx - Arbitrary File Upload
# Exploit Title: ShopNx - Angular5 Single Page Shopping Cart Application 1 - Arbitrary File Upload # Date: 2018-07-03 # Exploit Author: L0RD # Email: bornanematzadeh123@gmailcom # Vendor Homepage: codenxcom/ # Version: 1 # CVE: CVE-2018-12519 # Tested on: Win 10 =================================================== # Description : ShopNx 1 ...
Exploit DB: ShopNx Arbitrary File Upload
ShopNx suffers from an arbitrary file upload vulnerability ...

References

CWE-434https://cxsecurity.com/issue/WLB-2018060185https://www.exploit-db.com/exploits/44978/https://nvd.nist.govhttps://www.exploit-db.com/exploits/44978/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook