phpFK lite-version Cross Site Scripting

Information: Advisory by Netsparker Name: Multiple Cross-site Scripting Vulnerabilities in phpFK Affected Software: phpFK Affected Versions: lite-version Homepage: https://www.frank-karau.de/ Vulnerability: Reflected Cross-site Scripting Severity: 7.4 High Status: Not Fixed CVSS Score 3.0:...

CVE-2017-18364

creationtimestamp| type| source ---|---|--- 2019-03-27 19:32:57+00:00| seen| https://t.me/cibsecurity/3391 2019-04-03 00:31:43+00:00| seen| https://t.me/cibsecurity/3497...

CVE-2017-18364

CVE-2017-18364 concerns phpFK lite and is a reflected cross-site scripting (XSS) vulnerability. The affected components are the web interface files faq.php, members.php, search.php (via query strings) and user.php (via the user parameter). The underlying issue is that user-supplied input in these...