CVE-2016-15022: mosbth cimage check_system.php cross site scripting
A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file checksystem.php. The manipulation of the argument $SERVER['SERVERSOFTWARE'] leads to cross site scripting. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 0.7.19 is able to address this issue. The patch is named 401478c8393989836beeddfeac5ce44570af162b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-219715.
Other sources
A vulnerability was found in mosbth cimage up to 0.7.18. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file checksystem.php. The manipulation of the argument $SERVER['SERVERSOFTWARE'] leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.7.19 is able to address this issue. The name of the patch is 401478c8393989836beeddfeac5ce44570af162b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-219715.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-15022?
CVE-2016-15022 has a medium severity score of 6.1.
What type of attack is associated with CVE-2016-15022?
CVE-2016-15022 is associated with a cross site scripting (XSS) vulnerability.
How do I fix CVE-2016-15022?
To fix CVE-2016-15022, you should apply the available patch for the mosbth cimage package.
What software is affected by CVE-2016-15022?
CVE-2016-15022 affects the mosbth cimage software up to version 0.7.18.
What function is involved in CVE-2016-15022?
The vulnerability in CVE-2016-15022 involves manipulation within the check_system.php file.