Lucene search
Ali AbdollahiPACKETSTORM:149823HistoryOct 16, 2018 - 12:00 a.m.
HighPortal 12.5 Cross Site Scripting
2018-10-1600:00:00
Ali Abdollahi
packetstormsecurity.com
28
0.012 Low
EPSS
Percentile
85.1%
`Vulnerable Product: HighPortal
Affected version: 12.5
Vulnerability Type: XSS
CVE: CVE-2018-17964
CWE: CWE-79
Credit: Ali Abdollahi
Remote: Yes
Description:XSS vulnerability on Aryanic HighPortal version 12.5 via an Add Tags action.Contact: https://twitter.com/aliabdollahi2
References: - https://example.com/directory.php?id=51622199%3Cscript%3Ealert(1)%3C/script%3E&page=something.php- http://i63.tinypic.com/30mofax.png
`
Related
prion
prion
Design/Logic Flaw
2019-01-24 04:29:00
Deserialization of untrusted data
2018-10-17 14:29:00
cvelist
cvelist
CVE-2018-17964
2018-10-17 14:00:00
CVE-2018-17694
2019-01-24 04:00:00
cve
cve
CVE-2018-17964
2018-10-17 14:29:01
CVE-2018-17694
2019-01-24 04:29:04
nvd
nvd
CVE-2018-17964
2018-10-17 14:29:01
CVE-2018-17694
2019-01-24 04:29:04
zdi
zdi
Foxit PhantomPDF display Use-After-Free Remote Code Execution Vulnerability
2018-10-11 00:00:00
zdt
zdt
HighPortal 12.5 Cross Site Scripting Vulnerability
2018-10-16 00:00:00
openvas
openvas