Skip to content

CVE-2017-5960 An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/pub...

MediumCVSS 6.1 EPSS 0.98%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

An issue was discovered in Phalcon Eye through 0.4.1. The vulnerability exists due to insufficient filtration of user-supplied data in multiple HTTP GET parameters passed to the "phalconeye-master/public/external/pydio/plugins/editor.webodf/frame.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

Affected products

ProductAffected versionsFixed in
phalconeye project phalconeye <= 0.4.1 No fix listed

References

  • 96201 third-party-advisory vdb-entry
  • github.com exploit patch vendor-advisory