Lucene search
+L

6 matches found

CNVD
CNVD
•added 2018/01/04 12:00 a.m.•17 views

eLabFTW experiment infos component cross-site scripting vulnerability

Elabftw is an open source platform for hosting experimental data. The platform runs on Linux and supports storing a variety of objects. experiment infos component is one of the experiment infos storage components. A cross-site scripting vulnerability exists in the experiment infos component in...

5.4CVSS6.8AI score0.00771EPSS
SaveExploits1References1
Prion
Prion
•added 2018/01/03 6:29 p.m.•24 views

Cross site scripting

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...

3.5CVSS5.6AI score0.00771EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2018/01/03 6:29 p.m.•31 views

CVE-2017-1000478

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...

5.4CVSS5.6AI score0.00771EPSS
SaveExploits1References1
Mend
Mend
•added 2018/01/03 6:00 p.m.•3 views

CVE-2017-1000478

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...

5.4CVSS0.00771EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/03 12:00 a.m.•6 views

CVE-2017-1000478: Improper Neutralization of Input During Web Page Generation

ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...

5.4CVSS5.9AI score0.00771EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2018/01/03 12:00 a.m.•4 views

PT-2018-5243

Name of the Vulnerable Software and Affected Versions ELabftw version 1.7.8 Description The issue concerns stored cross-site scripting in the experiment infos component, which can lead to the arbitrary execution of JavaScript and denial of service. Recommendations For ELabftw version 1.7.8, updat...

5.4CVSS0.00771EPSS
SaveExploits1References3
Rows per page
Query Builder