3.5
CVSSv2

CVE-2018-20370

Published: 23/12/2018 Updated: 09/01/2019
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

SZ NetChat prior to 7.9 has XSS in the MyName input field of the Options module. Attackers are able to inject commands to compromise the enabled HTTP server web frontend.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

the-sz netchat