VYPR
Unrated severityNVD Advisory· Published Feb 7, 2018· Updated Aug 5, 2024

CVE-2018-6603

CVE-2018-6603

Description

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.

Affected products

1

Patches

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.