CVE-2017-6478

Description

paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• http://www.securityfocus.com/bid/96584 ↗
• https://github.com/paintballrefjosh/MaNGOSWebV4/issues/15 ↗
• https://github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8 ↗
• https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-6478.md ↗