Lucene search
MitreCVELIST:CVE-2017-1000428HistoryOct 03, 2022 - 4:23 p.m.
CVE-2017-1000428
2022-10-0316:23:10
mitre
www.cve.org
flatcore-cms
reflected xss
stored xss
user_management.php
admin log panel
cve-2017-1000428
0.001 Low
EPSS
Percentile
31.3%
flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER[‘PHP_SELF’] to build links and a stored XSS in the admin log panel by specifying a malformed User-Agent string.
Related
osv
osv
CVE-2017-1000428
2018-01-10 02:29:31
cve
cve
CVE-2017-1000428
2022-10-03 16:23:10
prion
prion
Design/Logic Flaw
2018-01-10 02:29:00
nvd
nvd
CVE-2017-1000428
2018-01-10 02:29:31