E18-0nwa1
CVSS:
6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
False Positive:
f
Variants:
1
Year:
2018
Description
This strike exploits a cross-site scripting vulnerability in Easy Hosting Control Panel.
This vulnerability is due to improper sanitization of "domainop" action parameter controlled by users in HTTP requests.
By enticing an authenticated user to visit an attacker controlled webpage or click a malicious link, an attacker could access any cookies, session tokens, or other sensitive information retained by the browser.
