CVE-2018-6362 Easy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the domainop action parameter, as demonstrated by reading the PHPSESSID cookie.
MediumCVSS 6.1
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Easy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the domainop action parameter, as demonstrated by reading the PHPSESSID cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ehcp easy hosting control panel | = 0.37.12.b | No fix listed |
References
- hyp3rlinx.altervista.org exploit third-party-advisory
- packetstormsecurity.com exploit third-party-advisory vdb-entry