CVE-2017-5631

An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string.

CVSS v3.0

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

4.49% chance of exploitation in the next 30 days, 91th percentile

Nuclei

medium · CWE-79

Published

2017-05-01

Updated

2024-08-05

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5631.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/42042

References

• CVE Record
• NVD entry

Related

• CVE-2017-5630
• CVE-2017-5633
• CVE-2017-5618
• CVE-2017-5637
• CVE-2017-5612
• CVE-2017-5638