← back
CVE-2018-18775

CVE-2018-18775

EPSS 6.6%
Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting (XSS) vulnerability via the Login.asp Msg parameter. NOTE: this is a deprecated product.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.htmlunverifiedcve_referencewww.exploit-db.com/exploits/45755/unverifiedexploitdbwww.exploit-db.com/exploits/45755unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/150059/Microstrategy-Web-7-Cross-Site-Scripting-Traversal.htmlhttps://www.exploit-db.com/exploits/45755/