Cross site scripting

2015-01-0219:59:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.9%

JSON

Cross-site scripting (XSS) vulnerability in Easy File Sharing Web Server 6.8 allows remote attackers to inject arbitrary web script or HTML via the username field during registration, which is not properly handled by forum.ghp.

CPENameOperatorVersion
easy_file_sharing_web_servereq6.8

CPE	Name	Operator	Version
	easy_file_sharing_web_server	eq	6.8

References

exchange.xforce.ibmcloud.com/vulnerabilities/99532

www.exploit-db.com/exploits/35626