6 matches found
eLabFTW experiment infos component cross-site scripting vulnerability
Elabftw is an open source platform for hosting experimental data. The platform runs on Linux and supports storing a variety of objects. experiment infos component is one of the experiment infos storage components. A cross-site scripting vulnerability exists in the experiment infos component in...
Cross site scripting
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...
CVE-2017-1000478
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...
CVE-2017-1000478
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...
CVE-2017-1000478: Improper Neutralization of Input During Web Page Generation
ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service...
PT-2018-5243
Name of the Vulnerable Software and Affected Versions ELabftw version 1.7.8 Description The issue concerns stored cross-site scripting in the experiment infos component, which can lead to the arbitrary execution of JavaScript and denial of service. Recommendations For ELabftw version 1.7.8, updat...