PT-2018-9572 · Unknown · Wampserver

Published 2018-12-20 · Updated 2019-01-07 · CVE-2018-1000848

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Wampserver versions prior to 3.1.5

Description The issue is related to a Cross Site Scripting (XSS) vulnerability in the index.php localhost page. This can be exploited via a payload using the onmouseover event, which can result in low impact. The vulnerability appears to have been fixed in version 3.1.5 and later.

Recommendations For versions prior to 3.1.5, update to version 3.1.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the index.php localhost page until the update is applied. Avoid using the onmouseover event in the affected page until the issue is resolved.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-1000848

Affected Products

Wampserver

References · 3

• https://osv.dev/vulnerability/CVE-2018-1000848 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000848 · Security Note
• http://forum.wampserver.com/read.php?2%2C153491 · Note