CVE-2018-8070: XSS

Published Mar 12, 2018

Updated

QCMS version 3.0 has XSS via the title parameter to the /guest/index.html URI.

Affected Software

1 affected component

QCMS QCMS=3.0

Event History

Mar 12, 2018

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Data Sourced

via NVD·05:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What conditions are required to exploit this issue?

An attacker needs network access, low-level privileges, and user interaction. The vulnerable input is the title parameter on the /guest/index.html endpoint.

What is the likely impact if exploitation succeeds?

Successful exploitation can expose or modify information in another security scope, according to the CVSS vector. Availability impact is not indicated.

CVE-2018-8070: XSS

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What conditions are required to exploit this issue?

What is the likely impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to exploit this issue?

What is the likely impact if exploitation succeeds?