Lucene search
PRIOn knowledge basePRION:CVE-2018-19836HistoryDec 03, 2018 - 7:29 p.m.
Design/Logic Flaw
2018-12-0319:29:00
PRIOn knowledge base
www.prio-n.com
5
In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering variables from the $_COOKIE value. This issue can, for example, be exploited in conjunction with CVE-2018-19835 to bypass many XSS filters such as the Chrome XSS filter.
Related
cve
cve
CVE-2018-19836
2018-12-03 19:29:00
CVE-2018-19835
2018-12-03 19:29:00
cvelist
cvelist
CVE-2018-19836
2018-12-03 19:00:00
CVE-2018-19835
2018-12-03 19:00:00
nvd
nvd
CVE-2018-19836
2018-12-03 19:29:00
CVE-2018-19835
2018-12-03 19:29:00
prion
prion
Cross site scripting
2018-12-03 19:29:00