deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-0521
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32919951. References: QC-CR#1097709.
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: http://www.securityfocus.com/bid/96951; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0522
Published: 2017-03-08
Description: An elevation of privilege vulnerability in a MediaTek APK could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the possibility of local arbitrary code execution in a privileged process. Product: Android. Versions: N/A. Android ID: A-32916158. References: M-ALPS03032516.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96798; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0523
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32835279. References: QC-CR#1096945.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96735; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0524
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33002026.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96808; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0525
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the Qualcomm IPA driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33139056. References: QC-CR#1097714.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96947; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0526
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33897738.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96949; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0527
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the HTC Sensor Hub Driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33899318.
CVSS Score: 7.0 (HIGH)
References: http://www.securityfocus.com/bid/96949; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0528
Published: 2017-03-08
Description: An elevation of privilege vulnerability in the kernel security subsystem could enable a local malicious application to to execute code in the context of a privileged process. This issue is rated as High because it is a general bypass for a kernel level defense in depth or exploit mitigation technology. Product: Android. Versions: Kernel-3.18. Android ID: A-33351919.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/bid/96807; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0529
Published: 2017-03-08
Description: An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-28449427. References: M-ALPS02710042.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96810; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0531
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32877245. References: QC-CR#1087469.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96743; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0532
Published: 2017-03-08
Description: An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-32370398. References: M-ALPS03069985.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96834; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0533
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32509422. References: QC-CR#1088206.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96734; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0534
Published: 2017-03-08
Description: An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-32508732. References: QC-CR#1088206.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96734; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0535
Published: 2017-03-08
Description: An information disclosure vulnerability in the HTC sound codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-33547247.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96833; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0536
Published: 2017-03-08
Description: An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33555878.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96835; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-0537
Published: 2017-03-08
Description: An information disclosure vulnerability in the kernel USB gadget driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-31614969.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/96831; http://www.securitytracker.com/id/1037968; https://source.android.com/security/bulletin/2017-03-01
CVE: CVE-2017-5178
Published: 2017-03-08
Description: An issue was discovered in Schneider Electric Tableau Server/Desktop Versions 7.0 to 10.1.3 in Wonderware Intelligence Versions 2014R3 and prior. These versions contain a system account that is installed by default. The default system account is difficult to configure with non-default credentials after installation, and changing the default credentials in the embedded Tableau Server is not documented. If Tableau Server is used with Windows integrated security (Active Directory), the software is not vulnerable. However, when Tableau Server is used with local authentication mode, the software is vulnerable. The default system account could be used to gain unauthorized access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1188
References: http://software.schneider-electric.com/pdf/security-bulletin/lfsec00000119/; http://www.securityfocus.com/bid/96721; https://ics-cert.us-cert.gov/advisories/ICSA-17-066-01
CVE: CVE-2017-6533
Published: 2017-03-08
Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (benchmark) passed to the webpagetest-master/www/benchmarks/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/WPO-Foundation/webpagetest/issues/833; http://www.securityfocus.com/bid/96935
CVE: CVE-2017-6534
Published: 2017-03-08
Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (pssid) passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/WPO-Foundation/webpagetest/issues/835; http://www.securityfocus.com/bid/96935
CVE: CVE-2017-6535
Published: 2017-03-08
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, url) passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/WPO-Foundation/webpagetest/issues/832; http://www.securityfocus.com/bid/96935
CVE: CVE-2017-6536
Published: 2017-03-08
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (url, pssid) passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/WPO-Foundation/webpagetest/issues/838; http://www.securityfocus.com/bid/96935
CVE: CVE-2017-6537
Published: 2017-03-08
Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (bgcolor) passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-6537.md; https://github.com/WPO-Foundation/webpagetest/issues/837
CVE: CVE-2017-6538
Published: 2017-03-08
Description: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (video) passed to the webpagetest-master/www/speedindex/index.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/WPO-Foundation/webpagetest/issues/836; http://www.securityfocus.com/bid/96935
CVE: CVE-2017-6539
Published: 2017-03-08
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/WPO-Foundation/webpagetest/issues/831; http://www.securityfocus.com/bid/96935
CVE: CVE-2017-6540
Published: 2017-03-08
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (configs) passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/WPO-Foundation/webpagetest/issues/830; http://www.securityfocus.com/bid/96935
CVE: CVE-2017-6541
Published: 2017-03-08
Description: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96935; https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-6541.md; https://github.com/WPO-Foundation/webpagetest/issues/834
CVE: CVE-2016-5894
Published: 2017-03-08
Description: IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 7.0 and 8.0 is vulnerable to information disclosure vulnerability. A local user could view a plain text password in a Unix console. IBM Reference #: 1997408.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg21997408; http://www.securityfocus.com/bid/96624; http://www.securitytracker.com/id/1037962
CVE: CVE-2016-5933
Published: 2017-03-08
Description: IBM Tivoli Monitoring 6.2 and 6.3 is vulnerable to possible host header injection attack that could lead to HTTP cache poisoning or firewall bypass. IBM Reference #: 1997223.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-254
References: http://www.ibm.com/support/docview.wss?uid=swg21997223; http://www.ibm.com/support/docview.wss?uid=swg21997223
CVE: CVE-2016-9006
Published: 2017-03-08
Description: IBM UrbanCode Deploy 6.1 and 6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Reference #: C1000264.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.ibm.com/support/docview.wss?uid=swg2C1000264; http://www.securityfocus.com/bid/96757; http://www.ibm.com/support/docview.wss?uid=swg2C1000264
CVE: CVE-2016-9985
Published: 2017-03-08
Description: IBM Cognos Server 10.1.1 and 10.2 stores highly sensitive information in log files that could be read by a local user. IBM Reference #: 1999671.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: http://www.ibm.com/support/docview.wss?uid=swg21999671; http://www.securityfocus.com/bid/96962; http://www.ibm.com/support/docview.wss?uid=swg21999671
CVE: CVE-2017-1150
Published: 2017-03-08
Description: IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not be permitted to view. IBM Reference #: 1999515.
CVSS Score: 3.1 (LOW)
CWE: CWE-269
References: http://www.ibm.com/support/docview.wss?uid=swg21999515; http://www.securityfocus.com/bid/96597; http://www.securitytracker.com/id/1037946
CVE: CVE-2017-6543
Published: 2017-03-08
Description: Tenable Nessus before 6.10.2 (as used alone or in Tenable Appliance before 4.5.0) was found to contain a flaw that allowed a remote, authenticated attacker to upload a crafted file that could be written to anywhere on the system. This could be used to subsequently gain elevated privileges on the system (e.g., after a reboot). This issue only affects installations on Windows.
CVSS Score: 7.3 (HIGH)
References: http://www.securityfocus.com/bid/96418; http://www.tenable.com/security/tns-2017-06; http://www.securityfocus.com/bid/96418
CVE: CVE-2017-6544
Published: 2017-03-08
Description: Gargaj/wuhu through 2017-03-08 is vulnerable to a reflected XSS in wuhu-master/www_admin/users.php (id parameter).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96751; https://github.com/Gargaj/wuhu/issues/20; http://www.securityfocus.com/bid/96751
CVE: CVE-2017-6547
Published: 2017-03-09
Description: Cross-site scripting (XSS) vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488 allows remote attackers to inject arbitrary JavaScript by requesting filenames longer than 50 characters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96938; https://bierbaumer.net/security/asuswrt/#cross-site-scripting-xss; https://www.exploit-db.com/exploits/41571/
CVE: CVE-2017-6548
Published: 2017-03-09
Description: Buffer overflows in networkmap on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allow remote attackers to execute arbitrary code on the router via a long host or port in crafted multicast messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119
References: http://www.securityfocus.com/bid/96938; https://asuswrt.lostrealm.ca/changelog; https://bierbaumer.net/security/asuswrt/#remote-code-execution
CVE: CVE-2017-6549
Published: 2017-03-09
Description: Session hijack vulnerability in httpd on ASUS RT-N56U, RT-N66U, RT-AC66U, RT-N66R, RT-AC66R, RT-AC68U, RT-AC68R, RT-N66W, RT-AC66W, RT-AC87R, RT-AC87U, RT-AC51U, RT-AC68P, RT-N11P, RT-N12+, RT-N12E B1, RT-AC3200, RT-AC53U, RT-AC1750, RT-AC1900P, RT-N300, and RT-AC750 routers with firmware before 3.0.0.4.380.7378; RT-AC68W routers with firmware before 3.0.0.4.380.7266; and RT-N600, RT-N12+ B1, RT-N11P B1, RT-N12VP B1, RT-N12E C1, RT-N300 B1, and RT-N12+ Pro routers with firmware before 3.0.0.4.380.9488; and Asuswrt-Merlin firmware before 380.65_2 allows remote attackers to steal any active admin session by sending cgi_logout and asusrouter-Windows-IFTTT-1.0 in certain HTTP headers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/96938; https://asuswrt.lostrealm.ca/changelog; https://bierbaumer.net/security/asuswrt/#session-stealing
CVE: CVE-2017-6552
Published: 2017-03-09
Description: Livebox 3 Sagemcom SG30_sip-fr-5.15.8.1 devices have an insufficiently large default value for the maximum IPv6 routing table size: it can be filled within minutes. An attacker can exploit this issue to render the affected system unresponsive, resulting in a denial-of-service condition for telephone, Internet, and TV services.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://www.securityfocus.com/bid/96827; https://www.exploit-db.com/exploits/41565/; https://www.youtube.com/watch?v=ShCs5_8mBlM&t=37s
CVE: CVE-2017-6555
Published: 2017-03-09
Description: Cross-site scripting (XSS) vulnerability in /admin/moduleinterface.php in CMS Made Simple 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the m1_description parameter (aka "Design Manager > Categories > Category Description").
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.daimacn.com/?id=7; http://www.securityfocus.com/bid/96933; http://www.daimacn.com/?id=7
CVE: CVE-2017-6556
Published: 2017-03-09
Description: Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings > globalmetadata" field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.daimacn.com/?id=8; http://www.securityfocus.com/bid/96933; http://www.daimacn.com/?id=8
CVE: CVE-2017-6558
Published: 2017-03-09
Description: iball Baton 150M iB-WRA150N v1 00000001 1.2.6 build 110401 Rel.47776n devices are prone to an authentication bypass vulnerability that allows remote attackers to view and modify administrative router settings by reading the HTML source code of the password.cgi file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://www.securityfocus.com/bid/96822; https://www.youtube.com/watch?v=8GZg1IuSfCs; http://www.securityfocus.com/bid/96822
CVE: CVE-2017-6559
Published: 2017-03-09
Description: XSS in Agora-Project 3.2.2 exists with an index.php?disconnect=1&msgNotif[]=[XSS] attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96940; https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/96940
CVE: CVE-2017-6560
Published: 2017-03-09
Description: XSS in Agora-Project 3.2.2 exists with an index.php?ctrl=misc&action=[XSS]&editObjId=[XSS] attack.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/96940; https://packetstormsecurity.com/files/141507/Agora-Project-3.2.2-Cross-Site-Scripting.html; http://www.securityfocus.com/bid/96940