high8.8Public exploit code
CVE-2018-6889
An issue was discovered in Typesetter 5.1.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TypeSetter CMS 5.1 - 'Host' Header Injection2018-02-13 · webapps · php
Impact
An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a malicious user can poison the web cache or perform advanced password reset attacks or even trigger arbitrary user re-direction.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typesettercms | Typesetter | Version 5.1 |