CVE-2017-7271 in Yii Framework

Resumen (Inglés)

Reflected Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.11, when development mode is used, allows remote attackers to inject arbitrary web script or HTML via crafted request data that is mishandled on the debug-mode exception screen.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2017-03-27

Divulgación

2017-03-27

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
99007	Yii Framework Debug Mode Reflected secuencias de comandos en sitios cruzados	79	No está definido	Arreglo oficial	CVE-2017-7271

Fuentes

• MITRE
• NVD
• CVE Details