Cross site scripting

2017-11-1417:29:00

PRIOn knowledge base

www.prio-n.com

0.005 Low

EPSS

Percentile

75.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the (1) “paramFile” parameter to /Site/Troubleshooting/DiagnosticReport.asp, or (2) “paramFile” parameter to /Site/Troubleshooting/SpeedTest.asp.

CPENameOperatorVersion
insitege6.5
insitele8.0

CPE	Name	Operator	Version
	insite	ge	6.5
	insite	le	8.0

References

packetstormsecurity.com/files/142587/Kodak-InSite-8.0-Cross-Site-Scripting.html

0.005 Low

EPSS

Percentile

75.4%

JSON

Related for PRION:CVE-2017-9085