CVE-2018-16142: XSS
Published Aug 30, 2018
·Updated
PHPOK 4.8.278 has a Reflected XSS vulnerability in framework/www/logincontrol.php via the back parameter to the okf function.
Affected Software
1 affected component
PhpOK PhpOK=4.8.278
Event History
Aug 30, 2018
CVE Published
via MITRE·05:00 AM
Data Sourced
via MITRE·05:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-16142?
CVE-2018-16142 is classified as a moderate severity reflected XSS vulnerability.
2
How do I fix CVE-2018-16142?
To fix CVE-2018-16142, validate and sanitize the _back parameter input in the login_control.php file to prevent script execution.
3
What impact does CVE-2018-16142 have on my application?
CVE-2018-16142 allows attackers to execute arbitrary JavaScript in the user's browser, leading to session hijacking and data manipulation.
4
Which software versions are affected by CVE-2018-16142?
CVE-2018-16142 affects PHPOK version 4.8.278.
5
How can I identify if my application is vulnerable to CVE-2018-16142?
You can identify if your application is vulnerable to CVE-2018-16142 by checking if the URL parameters are not properly validated or sanitized in the login functionality.