medium6.1Public exploit code
CVE-2017-15687
DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Logitech Media Server - Cross-Site Scripting2017-10-14 · webapps · multiple
Impact
DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Logitech | Media Server | Versions 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://fireshellsecurity.team/assets/pdf/DOM-Based-Cross-Site-Scripting-_XSS_-Logitech-Media-Server.pdf
- https://www.exploit-db.com/exploits/43024/
- https://fireshellsecurity.team/assets/pdf/DOM-Based-Cross-Site-Scripting-_XSS_-Logitech-Media-Server.pdf
- https://www.exploit-db.com/exploits/43024/