CVE-2018-19050: XSS
Published Nov 7, 2018
·Updated
MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter.
Affected Software
1 affected component
Metinfo Metinfo=6.1.3
Event History
Nov 7, 2018
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2018-19050.
2
What is the severity of CVE-2018-19050?
CVE-2018-19050 has a severity rating of medium (6.1).
3
What is the affected software version for CVE-2018-19050?
The affected software version for CVE-2018-19050 is MetInfo 6.1.3.
4
How can an attacker exploit CVE-2018-19050?
An attacker can exploit CVE-2018-19050 by using a crafted URL to inject malicious scripts into the application, potentially compromising user data and executing unauthorized actions.
5
How can I fix CVE-2018-19050?
To fix CVE-2018-19050, it is recommended to update to a patched version of MetInfo (6.1.4 or later) or apply appropriate security measures to mitigate the risk of exploitation.