Lucene search
K

CVE-2018-12090

🗓️ 11 Jun 2018 10:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views

There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change

Related
Detection
Refs
ReporterTitlePublishedViews
Family
0day.today
LAMS < 3.1 - Cross-Site Scripting Vulnerability
6 Aug 201800:00
zdt
CNVD
LAMS Cross-Site Scripting Vulnerability
12 Jun 201800:00
cnvd
Cvelist
CVE-2018-12090
11 Jun 201810:00
cvelist
EUVD
EUVD-2018-4070
7 Oct 202500:30
euvd
NVD
CVE-2018-12090
11 Jun 201810:29
nvd
Packet Storm
LAMS Cross Site Scripting
6 Aug 201800:00
packetstorm
Prion
Cross site scripting
11 Jun 201810:29
prion
NVD
Node

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation