CVE coverage
View on NVD →
CVE-2018-12519
CVSS 8.8
2 detections found
An issue was discovered in ShopNx through 2017-11-17. The vulnerability allows a remote attacker to upload any malicious file to a Node.js application. An attacker can upload a malicious HTML file that contains a JavaScript payload to steal a user's credentials.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| suricata | ET WEB_SPECIFIC_APPS ShopNx - Arbitrary File Upload | rev 3 | 2020-09-16 |
| snort | ET WEB_SPECIFIC_APPS ShopNx - Arbitrary File Upload | rev 2 | 2018-07-05 |