CVE-2018-1000848

Wampserver version prior to version 3.1.5 contains a Cross Site Scripting (XSS) vulnerability in index.php localhost page that can result in very low. This attack appear to be exploitable via payload onmouseover. This vulnerability appears to have been fixed in 3.1.5 and later.
Configurations

Configuration 1 (hide)

cpe:2.3:a:wampserver:wampserver:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:40

Type Values Removed Values Added
References () http://forum.wampserver.com/read.php?2%2C153491 - () http://forum.wampserver.com/read.php?2%2C153491 -

07 Nov 2023, 02:51

Type Values Removed Values Added
References
  • {'url': 'http://forum.wampserver.com/read.php?2,153491', 'name': 'http://forum.wampserver.com/read.php?2,153491', 'tags': ['Third Party Advisory'], 'refsource': 'MISC'}
  • () http://forum.wampserver.com/read.php?2%2C153491 -

Information

Published : 2018-12-20 15:29

Updated : 2024-11-21 03:40


NVD link : CVE-2018-1000848

Mitre link : CVE-2018-1000848

CVE.ORG link : CVE-2018-1000848


JSON object : View

Products Affected

wampserver

  • wampserver
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')