medium6.1Public exploit code
CVE-2017-6478
paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MaNGOSWebV4 4.0.6 - Reflected XSS2025-12-03 · webapps · multiple
Impact
paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mangoswebv4 Project | Mangoswebv4 | before 4.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96584
- https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2017-6478.md
- https://github.com/paintballrefjosh/MaNGOSWebV4/issues/15
- https://github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8
- http://www.securityfocus.com/bid/96584
- https://github.com/paintballrefjosh/MaNGOSWebV4/issues/15
- https://github.com/paintballrefjosh/MaNGOSWebV4/releases/tag/4.0.8