Lucene search
PRIOn knowledge basePRION:CVE-2017-7249HistoryMar 23, 2017 - 10:59 p.m.
Cross site scripting
2017-03-2322:59:00
PRIOn knowledge base
www.prio-n.com
1
0.001 Low
EPSS
Percentile
47.7%
Multiple Cross-Site Scripting (XSS) were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data (action, userid) passed to the ‘Gazelle-master/sections/tools/data/ocelot_info.php’ URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gazelle | eq | <= 2016111 |
Related
nvd
nvd
CVE-2017-7249
2017-03-23 22:59:00
cve
cve
CVE-2017-7249
2017-03-23 22:59:00
cvelist
cvelist
CVE-2017-7249
2017-03-23 22:00:00