Lucene search
MitreCVELIST:CVE-2017-18024HistoryJan 10, 2018 - 6:00 p.m.
CVE-2017-18024
2018-01-1018:00:00
mitre
www.cve.org
4
EPSS
0.001
Percentile
31.9%
AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1.
Related
packetstorm
packetstorm
AvantFAX 3.3.3 Cross Site Scripting
2018-01-09 00:00:00
prion
prion
Default credentials
2018-01-10 18:29:00
nvd
nvd
CVE-2017-18024
2018-01-10 18:29:01
hackerone
hackerone
Endless Group: XSS on https://fax.pbx.itsendless.org/ (CVE-2017-18024)
2020-08-20 20:56:16
nuclei
nuclei
AvantFAX 3.3.3 - Cross-Site Scripting
2021-08-05 05:48:55
cve
cve
CVE-2017-18024
2018-01-10 18:29:01