SecuritySpace - CVE-2018-7563

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-7563

Description: An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.

Test IDs: 1.3.6.1.4.1.25623.1.0.874291 1.3.6.1.4.1.25623.1.1.10.2018.0272 1.3.6.1.4.1.25623.1.0.874294

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-7563
https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/

CVE ID:	CVE-2018-7563
Description:	An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The attacker-supplied code can perform a wide variety of actions, such as stealing the victim's session token or login credentials, performing arbitrary actions on the victim's behalf, and logging their keystrokes.
Test IDs:	1.3.6.1.4.1.25623.1.0.874291 1.3.6.1.4.1.25623.1.1.10.2018.0272 1.3.6.1.4.1.25623.1.0.874294
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-7563 https://membership.backbox.org/glpi-9-2-1-multiple-vulnerabilities/