PT-2018-9572 · Unknown · Wampserver

Publicado 2018-12-20 · Atualizado 2019-01-07 · CVE-2018-1000848

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Wampserver versions prior to 3.1.5

Description The issue is related to a Cross Site Scripting (XSS) vulnerability in the index.php localhost page. This can be exploited via a payload using the onmouseover event, which can result in low impact. The vulnerability appears to have been fixed in version 3.1.5 and later.

Recommendations For versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the index.php localhost page until the update is applied. Avoid using the onmouseover event in the affected page until the issue is resolved.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-1000848

Produtos afetados

Wampserver

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-1000848 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000848 · Nota de Segurança
• http://forum.wampserver.com/read.php?2%2C153491 · Nota