CVE-2017-18024 in AvantFAX
Summary
AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1.
Reservation
01/08/2018
Disclosure
01/10/2018
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 111713 | AvantFAX Script cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2017-18024 |