phpFK lite XSS vulnerability via query string or user paramete
Reporter | Title | Published | Views | Family All 5 |
---|---|---|---|---|
![]() | CVE-2017-18364 | 5 Feb 202518:26 | – | redhatcve |
![]() | CVE-2017-18364 | 27 Mar 201916:59 | – | cvelist |
![]() | Default credentials | 27 Mar 201917:29 | – | prion |
![]() | CVE-2017-18364 | 27 Mar 201917:29 | – | nvd |
![]() | phpFK lite-version Cross Site Scripting | 10 Jul 201900:00 | – | packetstorm |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
Query Based | query param | /faq.php | Reflected Cross-site Scripting vulnerability in faq.php query string. | CWE-79 |
Query Based | query param | /members.php | Reflected Cross-site Scripting vulnerability in members.php query string. | CWE-79 |
search | query param | /members.php | Reflected Cross-site Scripting vulnerability in members.php on search parameter (GET). | CWE-79 |
search | request body | /members.php | Reflected Cross-site Scripting vulnerability in members.php on search parameter (POST). | CWE-79 |
Query Based | query param | /search.php | Reflected Cross-site Scripting vulnerability in search.php query string. | CWE-79 |
user | query param | /user.php | Reflected Cross-site Scripting vulnerability in user.php user parameter. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo