CVE-2017-0378

CVE-2017-0378 affects Phamm prior to 0.6.7. The vulnerability is a cross-site scripting issue in the login_form function within views/helpers.php, exploitable via PATH_INFO to main.php. Root cause: insufficient input validation leading to script/HTML injection. Affected product/version: Phamm

CVE-2017-0378

XSS exists in the loginform function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATHINFO to main.php...

CVE-2017-0378

Removed by vendor...