CVE-2018-1000642

Published: Aug 20, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

FlightAirMap version <=v1.0-beta.21 contains a Cross Site Scripting (XSS) vulnerability in GET variable used within registration sub menu page that can result in unauthorised actions and access to data, stealing session information. This vulnerability appears to have been fixed in after commit 22b09a3.

Affected (25)

Products: Flightairmap: Flightairmap

Flightairmap

1 product

Flightairmap

Configuration A

25 vulnerable

Vulnerable Software	Affected Versions
Flightairmap Flightairmap	Version 0.1 beta1
Flightairmap Flightairmap	Version 0.2 beta1
Flightairmap Flightairmap	Version 0.5 beta1
Flightairmap Flightairmap	Version 0.6 beta1
Flightairmap Flightairmap	Version 1.0 beta10
Flightairmap Flightairmap	Version 1.0 beta11
Flightairmap Flightairmap	Version 1.0 beta12
Flightairmap Flightairmap	Version 1.0 beta13
Flightairmap Flightairmap	Version 1.0 beta14
Flightairmap Flightairmap	Version 1.0 beta15
Flightairmap Flightairmap	Version 1.0 beta16
Flightairmap Flightairmap	Version 1.0 beta17
Flightairmap Flightairmap	Version 1.0 beta18
Flightairmap Flightairmap	Version 1.0 beta19
Flightairmap Flightairmap	Version 1.0 beta1
Flightairmap Flightairmap	Version 1.0 beta20
Flightairmap Flightairmap	Version 1.0 beta21
Flightairmap Flightairmap	Version 1.0 beta2
Flightairmap Flightairmap	Version 1.0 beta3
Flightairmap Flightairmap	Version 1.0 beta4
Flightairmap Flightairmap	Version 1.0 beta5
Flightairmap Flightairmap	Version 1.0 beta6
Flightairmap Flightairmap	Version 1.0 beta7
Flightairmap Flightairmap	Version 1.0 beta8
Flightairmap Flightairmap	Version 1.0 beta9