CVE-2017-6397

Ysurac/FlightAirMap

on github

Published

March 2, 2017

Severity

CVSS v3:

6.1 MEDIUM

CVSS v2:

4.3 MEDIUM

Description

An issue was discovered in FlightAirMap v1.0-beta.10. The vulnerability exists due to insufficient filtration of user-supplied data in multiple parameters passed to several *-sub-menu.php pages. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

References

https://github.com/Ysurac/FlightAirMap/issues/275
http://www.securityfocus.com/bid/96551

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:flightairmap:flightairmap:1.0:beta10::::::	n/a	n/a	1.0

External Links

NVD - CVE-2017-6397