CVE-2018-18830
Last modified
CVE-2018-18830 is a vulnerability of currently unknown severity. An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mingsoft | Mcms | 4.6.5 |
References
- https://gitee.com/mingSoft/MCMS/issues/IO0IQThird Party Advisory
- https://gitee.com/mingSoft/MCMS/issues/IO0IQThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-18830?
How severe is CVE-2018-18830?
How do I fix CVE-2018-18830?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-18825Pagoda Linux panel V6.0 has XSS via the verification code as…
- CVE-2018-18826There exists a heap-based buffer overflow in vc1_decode_p_mb…
- CVE-2018-18827There exists a heap-based buffer over-read in ff_vc1_pred_dc…
- CVE-2018-18828There exists a heap-based buffer overflow in vc1_decode_i_bl…
- CVE-2018-18829There exists a NULL pointer dereference in ff_vc1_parse_fram…
- CVE-2018-1883A problem within the IBM MQ 9.0.2, 9.0.3, 9.0.4, 9.0.5, and …5.3
- CVE-2018-18831An issue was discovered in com\mingsoft\cms\action\Generater…
- CVE-2018-18832admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASP…
- CVE-2018-18834An issue has been found in libIEC61850 v1.3. It is a heap-ba…
- CVE-2018-18835upload_template() in system/changeskin.php in DocCms 2016.5.…
- CVE-2018-18836An issue was discovered in Netdata 1.10.0. JSON injection ex…
- CVE-2018-18837An issue was discovered in Netdata 1.10.0. HTTP Header Injec…
Are you affected by CVE-2018-18830?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST