CVE-2018-6603

2018-02-0705:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

45.6%

JSON

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.

References

dfdrconsulting.com/cve-2018-6603-promise-technology-webpam-pro-e-http-response-header-injection-xss/