CVE-2018-8903

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Open-AuditIT Professional 2.1 - Cross-Site Scripting2018-03-28 · webapps · php

Impact

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html
• https://www.exploit-db.com/exploits/44354/
• https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.html
• https://www.exploit-db.com/exploits/44354/