mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
1.0 KiB
1.0 KiB
CVE-2019-9926
Description
An issue was discovered in LabKey Server 19.1.0. It is possible to force a logged-in administrator to execute code through a /reports-viewScriptReport.view CSRF vulnerability.
POC
Reference
- https://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2019-9926
- https://rhinosecuritylabs.com/application-security/labkey-server-vulnerabilities-to-rce/
Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/H4cksploit/CVEs-master
- https://github.com/RhinoSecurityLabs/CVEs
- https://github.com/alphaSeclab/sec-daily-2019
- https://github.com/merlinepedra/RHINOECURITY-CVEs
- https://github.com/merlinepedra25/RHINOSECURITY-CVEs
- https://github.com/sunzu94/AWS-CVEs