KMCIS CaseAware - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: CaseAware Cross Site Scripting Vulnerability Date: 20th May 2017 Exploit Author: justpentest Vendor Homepage: https://caseaware.com/ Version: All the versions Contact: email protected CVE : 2017-5631 Source:...

CaseAware Cross Site Scripting

Exploit Title: CaseAware Cross Site Scripting Vulnerability Date: 20th May 2017 Exploit Author: justpentest Vendor Homepage: https://caseaware.com/ Version: All the versions Contact: [email protected] CVE : 2017-5631 Source:...

KMCIS CaseAware - Cross-Site Scripting

KMCIS CaseAware - Cross-Site Scripting Exploit Title: CaseAware Cross Site Scripting Vulnerability Date: 20th May 2017 Exploit Author: justpentest Vendor Homepage: https://caseaware.com/ Version: All the versions Contact: [email protected] CVE : 2017-5631 Source:...

KMCIS CaseAware - Cross-Site Scripting

Exploit Title: CaseAware Cross Site Scripting Vulnerability Date: 20th May 2017 Exploit Author: justpentest Vendor Homepage: https://caseaware.com/ Version: All the versions Contact: [email protected] CVE : 2017-5631 Source:...

Cross site scripting

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...

CVE-2017-5631

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...

CVE-2017-5631

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...

CVE-2017-5631

KMCIS CaseAware is affected by a reflected cross-site scripting (XSS) vulnerability in the login.php endpoint. The issue stems from insufficient sanitization of the user parameter (usr) in the login.php query string, enabling injection of malicious scripts into pages viewed by users. Impact per s...

PT-2017-16631

Name of the Vulnerable Software and Affected Versions KMCIS CaseAware affected versions not specified Description An issue was discovered in KMCIS CaseAware, where reflected cross-site scripting is present in the usr parameter transmitted in the "login.php" query string. Recommendations At the...

CVE-2017-5631: Improper Neutralization of Input During Web Page Generation

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter i.e., "usr" that is transmitted in the login.php query string...