CVE-2017-20114

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability has been found in TrueConf Server 4.3.7 and classified as problematic. This vulnerability affects unknown code of the file /admin/conferences/get-all-status/. The manipulation of the argument keys[] leads to basic cross site scripting (Reflected). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-80 CWE-79

Affected software

Vendor	Product	Versions
TrueConf	Server	4.3.7

References

https://vuldb.com/?id.96628Permissions Required, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41184/Exploit, Third Party Advisory, VDB Entry
https://vuldb.com/?id.96628Permissions Required, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/41184/Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Jun 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-201155.4A vulnerability was found in TrueConf Server 4.3.7 and classified as problematic. This issue affects some unknown processing of the file /ad CVE-2017-201165.4A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admi CVE-2017-201175.4A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability is an unknown functi CVE-2017-201185.4A vulnerability was found in TrueConf Server 4.3.7. It has been rated as problematic. Affected by this issue is some unknown functionality o CVE-2017-201196.1A vulnerability classified as problematic has been found in TrueConf Server 4.3.7. This affects an unknown part of the file /admin/general/c CVE-2017-201208.8A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/ser CVE-2017-201217.8A vulnerability was found in Teradici Management Console 2.2.0. It has been declared as critical. Affected by this vulnerability is an unkno CVE-2017-201225.4A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown function CVE-2017-201237.8A vulnerability was found in Viscosity 1.6.7. It has been classified as critical. This affects an unknown part of the component DLL Handler.CVE-2017-201248.8A vulnerability classified as critical has been found in Online Hotel Booking System Pro Plugin 1.0. Affected is an unknown function of the CVE-2017-201259.8A vulnerability classified as critical was found in Online Hotel Booking System Pro 1.2. Affected by this vulnerability is an unknown functi CVE-2017-201269.8A vulnerability was found in KB Affiliate Referral Script 1.0. It has been classified as critical. This affects an unknown part of the file