Lucene search

CVE-2018-7193

🗓️ 27 Mar 2018 17:00:29Reported by mitreType

cve🔗 web.nvd.nist.gov👁 29 Views🌐 WEB

CVE-2018-7193 Cross-site scripting vulnerability in osTicke

Reporter	Title	Published	Views	Family All 5
OSV	CVE-2018-7193	27 Mar 201817:29	–	osv
Cvelist	CVE-2018-7193	27 Mar 201817:00	–	cvelist
Prion	Cross site scripting	27 Mar 201817:29	–	prion
NVD	CVE-2018-7193	27 Mar 201817:29	–	nvd
Nuclei	osTicket < 1.10.2 - Cross-Site Scripting	10 Oct 202407:40	–	nuclei

Nvd

Node

osticket osticketRange≤1.10.1

Source	Link
blog	www.blog.securityevaluators.com/vulnerabilities-found-in-popular-ticketing-system-dd273bda229c

Parameter	Position	Path	Description	CWE
order	query param	/scp/directory.php	Cross-site scripting vulnerability allowing remote attackers to inject arbitrary web script or HTML.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Mar 2018 17:29Current

6Medium risk

Vulners AI Score6

CVSS24.3

CVSS36.1

EPSS0.00292

CWE-79