CVE-2017-17832 ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settings_SMS_ALERT_TYPE parameter, a...
MediumCVSS 5.4
EPSS 0.71%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanitized when passed in the settings_SMS_ALERT_TYPE parameter, and JavaScript can be executed on settings-save.html (the Settings - SMS Alerts page).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| serverscheck monitoring software | < 14.2.3 | 14.2.3 |
References
- packetstormsecurity.com exploit patch third-party-advisory vdb-entry
- serverscheck.com patch release-notes vendor-advisory