CVE-2017-6878: XSS
Published Mar 27, 2017
·Updated
Cross-site scripting (XSS) vulnerability in MetInfo 5.3.15 allows remote authenticated users to inject arbitrary web script or HTML via the name2 parameter to admin/column/delete.php.
Affected Software
1 affected component
Metinfo Metinfo=5.3.15
Event History
Mar 27, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6878?
CVE-2017-6878 is considered a medium severity vulnerability.
2
How do I fix CVE-2017-6878?
To fix CVE-2017-6878, update MetInfo to a version newer than 5.3.15 that addresses this vulnerability.
3
Who is affected by CVE-2017-6878?
Remote authenticated users of MetInfo 5.3.15 are affected by CVE-2017-6878.
4
What type of vulnerability is CVE-2017-6878?
CVE-2017-6878 is classified as a cross-site scripting (XSS) vulnerability.
5
What parameter is exploited in CVE-2017-6878?
The vulnerability in CVE-2017-6878 is exploited via the name_2 parameter in the admin/column/delete.php script.