Lucene search
PRIOn knowledge basePRION:CVE-2017-17057HistoryDec 04, 2017 - 2:29 p.m.
Cross site scripting
2017-12-0414:29:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
41.9%
There is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to insufficient filtration of user-supplied data in the ‘Range’ field of the ‘Department’ module in a Personnel Advanced Query. A remote attacker can execute arbitrary HTML and script code in the browser in the context of the vulnerable application.
| CPE | Name | Operator | Version |
|---|---|---|---|
| zktime_web | eq | 2.0.1.12280 |
Related
cvelist
cvelist
CVE-2017-17057
2017-12-04 14:00:00
nvd
nvd
CVE-2017-17057
2017-12-04 14:29:00
packetstorm
packetstorm
ZKTeco ZKTime Web 2.0.1.12280 Cross Site Scripting
2017-11-30 00:00:00
cve
cve
CVE-2017-17057
2017-12-04 14:29:00
zdt
zdt
ZKTeco ZKTime Web 2.0.1.12280 Cross Site Scripting Vulnerability
2017-12-01 00:00:00
openvas
openvas
ZKTeco ZKTime Web Multiple Vulnerabilities
2017-12-05 00:00:00