CVE-2018-10307: XSS
Published May 18, 2018
·Updated
error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception.
Affected Software
1 affected component
ILIAS ILIAS>=5.2.0<5.3.4
Remediation
Event History
May 18, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2018-10307.
2
What is the title of this vulnerability?
The title of this vulnerability is 'error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception.'
3
What is the severity of CVE-2018-10307?
The severity of CVE-2018-10307 is medium with a severity value of 6.1.
4
Which software versions are affected by CVE-2018-10307?
ILIAS versions 5.2.x through 5.3.x before 5.3.4 are affected by this vulnerability.
5
How can the vulnerability be exploited?
The vulnerability can be exploited by an attacker injecting malicious code into the text of a PDO exception, allowing for XSS attacks.