Medium severity6.1NVD Advisory· Published Jan 12, 2017· Updated Jun 17, 2026
CVE-2016-3150
CVE-2016-3150
Description
Cross-site scripting (XSS) vulnerability in wallpaper.php in the Base Unit in Barco ClickShare CSC-1 devices with firmware before 01.09.03, CSM-1 devices with firmware before 01.06.02, and CSE-200 devices with firmware before 01.03.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
5cpe:2.3:o:barco:clickshare_csc-1_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:barco:clickshare_csc-1_firmware:*:*:*:*:*:*:*:*range: <=01.09.05.02
- (no CPE)range: <01.09.03
cpe:2.3:o:barco:clickshare_cse-200_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:barco:clickshare_cse-200_firmware:*:*:*:*:*:*:*:*range: <=01.09.02.05
- (no CPE)range: <01.03.02
- Range: <01.06.02
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/139713/Barco-ClickShare-XSS-Remote-Code-Execution-Path-Traversal.htmlnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/94330nvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/archive/1/539754/100/0/threadednvd
News mentions
0No linked articles in our index yet.