Lucene search
PRIOn knowledge basePRION:CVE-2018-10164HistoryMay 03, 2018 - 6:29 p.m.
Cross site scripting
2018-05-0318:29:00
PRIOn knowledge base
www.prio-n.com
3
Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script or HTML via the implementation of portalPictureUpload functionality. This is fixed in version 2.6.1_Windows.
| CPE | Name | Operator | Version |
|---|---|---|---|
| eap_controller | eq | 2.5.4 | |
| eap_controller | eq | 2.6.0 |
Related
cve
cve
CVE-2018-10164
2018-05-03 18:29:00
cvelist
cvelist
CVE-2018-10164
2018-05-03 18:00:00
nvd
nvd
CVE-2018-10164
2018-05-03 18:29:00
packetstorm
packetstorm
TP-Link EAP Controller CSRF / Hard-Coded Key / XSS
2018-05-04 00:00:00
zdt
zdt
TP-Link EAP Controller CSRF / Hard-Coded Key / XSS Vulnerabilities
2018-05-04 00:00:00
coresecurity
coresecurity
TP-Link EAP Controller Multiple Vulnerabilities
2018-05-03 00:00:00