CVE-2016-15022

A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file checksystem.php. The manipulation of the argument $SERVER'SERVERSOFTWARE' leads to cross site scripting. The attack can be launched...

CVE-2016-15022 mosbth cimage check_system.php cross site scripting

A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file checksystem.php. The manipulation of the argument $SERVER'SERVERSOFTWARE' leads to cross site scripting. The attack can be launched...

CVE-2016-15022

CVE-2016-15022 affects mosbth cimage up to version 0.7.18. The vulnerability is in check_system.php: manipulating $_SERVER['SERVER_SOFTWARE'] can trigger cross-site scripting. The issue can be exploited remotely and, according to sources, exploitation is difficult but feasible. Upgrading to 0.7.1...