CVE-2017-7871

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

trollepierre/tdm before 2017-04-13 is vulnerable to a reflected XSS in tdm-master/webhook.php (challenge parameter).

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 14, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-78759.8In wallpaper.c in feh before v2.18.3, if a malicious client pretends to be the E17 window manager, it is possible to trigger an out-of-boundCVE-2017-787610.0This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixCVE-2017-78778.8CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.CVE-2017-78789.8SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.CVE-2017-78797.5SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content database.CVE-2017-78818.8BigTree CMS through 4.2.17 relies on a substring check for CSRF protection, which allows remote attackers to bypass this check by placing thCVE-2017-78829.8LibreOffice before 2017-03-14 has an out-of-bounds write related to the HWPFile::TagsRead function in hwpfilter/source/hwpfile.cxx.CVE-2017-78848.4In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged,CVE-2017-78857.1Artifex jbig2dec 0.13 has a heap-based buffer over-read leading to denial of service (application crash) or disclosure of sensitive informatCVE-2017-78869.8Dolibarr ERP/CRM 4.0.4 has SQL Injection in doli/theme/eldy/style.css.php via the lang parameter.CVE-2017-78876.1Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.CVE-2017-78889.8Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.
CVE-2017-7871: Medium severity, CVSS 6.1 | Vulnix