CVE-2018-10547

🗓️ 29 Apr 2018 21:00:29Reported by mitreType

An incomplete fix for CVE-2018-5712 leads to Reflected XSS on PHP 403 and 404 error pages

Reporter	Title	Published	Views	Family All 143
F5 Networks	K61561040 : PHP vulnerability CVE-2018-10547	7 May 201800:00	–	f5
F5 Networks	K10204425 : PHP vulnerability CVE-2018-5712	24 Jan 201800:00	–	f5
Debian CVE	CVE-2018-10547	29 Apr 201821:29	–	debiancve
Debian CVE	CVE-2018-5712	16 Jan 201809:29	–	debiancve
Cvelist	CVE-2018-10547	29 Apr 201821:00	–	cvelist
Cvelist	CVE-2018-5712	16 Jan 201809:00	–	cvelist
RedhatCVE	CVE-2018-10547	2 May 201810:29	–	redhatcve
RedhatCVE	CVE-2018-5712	4 Nov 201909:50	–	redhatcve
Veracode	Cross-site Scripting (XSS)	20 Aug 201900:10	–	veracode
Veracode	Cross-site Scripting (XSS)	16 May 201903:00	–	veracode

Nvd

Node

php phpRange<5.6.36

php phpRange7.0.0–7.0.30

php phpRange7.1.0–7.1.17

php phpRange7.2.0–7.2.5

Node

canonical ubuntu_linuxMatch12.04esm

canonical ubuntu_linuxMatch14.04lts

canonical ubuntu_linuxMatch16.04lts

canonical ubuntu_linuxMatch17.10

canonical ubuntu_linuxMatch18.04lts

Node

debian debian_linuxMatch7.0

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

Node

netapp storage_automation_storeMatch-

Source	Link
usn	www.usn.ubuntu.com/3646-1/
tenable	www.tenable.com/security/tns-2018-12
debian	www.debian.org/security/2018/dsa-4240
security	www.security.netapp.com/advisory/ntap-20180607-0003/
bugs	www.bugs.php.net/bug.php
access	www.access.redhat.com/errata/RHSA-2019:2519
lists	www.lists.debian.org/debian-lts-announce/2018/06/msg00005.html
php	www.php.net/ChangeLog-7.php
securitytracker	www.securitytracker.com/id/1040807
usn	www.usn.ubuntu.com/3646-2/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

29 Apr 2018 21:29Current

7.2High risk

Vulners AI Score7.2

CVSS24.3

CVSS36.1

EPSS0.201

CWE-79