PT-2019-8301

CVE-2017-18364

·

Published

2019-03-27

·

Updated

2019-07-11

Description by

CVSS 3.1
7.4
High
MetricsAC:L/AV:N/A:N/C:H/I:N/PR:N/S:C/UI:R
Name of the Vulnerable Software and Affected Versions phpFK lite (affected versions not specified)
Description The issue concerns an XSS vulnerability. It can be exploited via the query string in faq.php, members.php, or search.php, or through the user parameter in user.php.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2017-18364
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com