CVE-2018-14481: XSS

Published Jan 3, 2019

Updated

Osclass 3.7.4 has XSS via the query string to index.php, a different vulnerability than CVE-2014-6280.

Affected Software

1 affected component

OSClass Osclass=3.7.4

Event History

Jan 3, 2019

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

Does exploiting this issue require an authenticated Osclass account?

No. The CVSS vector indicates that no privileges are required for exploitation.

Does an attacker need a victim to take an action for exploitation to succeed?

Yes. The CVSS vector indicates that user interaction is required.

What security impact is indicated by the available scoring data?

The CVSS vector indicates low confidentiality and integrity impact, with no availability impact. It is network-accessible and has low attack complexity.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.