Lucene search
CVE-2018-6362
Easy Hosting Control Panel (EHCP) v0.37.12.b XSS vulnerabilit
Show more
| Reporter | Title | Published | Views | Family All 4 |
|---|---|---|---|---|
 | Easy Hosting Control Panel 0.37.12.b Cross Site Scripting Cookie Theft | 9 May 201800:00 | – | packetstorm |
 | CVE-2018-6362 | 11 May 201821:29 | – | nvd |
 | Design/Logic Flaw | 11 May 201821:29 | – | prion |
 | CVE-2018-6362 | 11 May 201821:00 | – | cvelist |
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| op | query param | /ehcp/index.php | The Easy Hosting Control Panel (EHCP) is vulnerable to cross-site scripting (XSS) via the domainop action parameter, which can allow an attacker to steal cookies. | CWE-79 |
| action | query param | /ehcp/index.php | The Easy Hosting Control Panel (EHCP) is vulnerable to cross-site scripting (XSS) via the domainop action parameter, which can allow an attacker to steal cookies. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo11 May 2018 21:29Current
6Medium risk
Vulners AI Score6
CVSS24.3
CVSS36.1
EPSS0.00187