.. / CVE-2018-10230

Exploit for Zend Server <9.13 - Cross-Site Scripting (CVE-2018-10230)

Description:

Zend Server before version 9.13 is vulnerable to cross-site scripting via the debug_host parameter.

Nuclei Template

View the template here CVE-2018-10230.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-10230.yaml
Copy

References:

https://www.zend.com/en/products/server/release-notes
https://www.synacktiv.com/ressources/zend_server_9_1_3_xss.pdf
https://github.com/ARPSyndicate/kenzer-templates
https://nvd.nist.gov/vuln/detail/CVE-2018-10230