medium6.1Public exploit code
CVE-2017-5631
An issue was discovered in KMCIS CaseAware.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- KMCIS CaseAware - Cross-Site Scripting2017-05-20 · webapps · php
Impact
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kmc Information Systems | Caseaware | All versions |