CVE-2018-18437

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Axioscloud Sissiweb Registro Elettronico 7.0.0 - 'Error_desc' Cross-Site Scripting2018-10-24 · webapps · aspx

Impact

In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.binaryworld.it/guidepoc.asp
• https://www.exploit-db.com/exploits/45668/
• http://www.binaryworld.it/guidepoc.asp
• https://www.exploit-db.com/exploits/45668/