CVE-2018-1155

MediumCVSS 5.4/10Last modified Aug 17, 2026

Description

In SecurityCenter versions prior to 5.7.0, a cross-site scripting (XSS) issue could allow an authenticated attacker to inject JavaScript code into an image filename parameter within the Reports feature area. Properly updated input validation techniques have been implemented to correct this issue.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Aug 2, 2018
Last modified: Aug 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-115517.8AXON PBX 2.02 contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on a tar CVE-2018-115526.1There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to ins CVE-2018-115536.1SGIN.CN xiangyun platform V9.4.10 has XSS via the login_url parameter to /login.php.CVE-2018-115549.8The forgotten-password feature in index.php/member/reset/reset_email.html in YzmCMS v3.2 through v3.7 has a Response Discrepancy Information CVE-2018-115557.8tificc in Little CMS 2.9 has an out-of-bounds write in the PrecalculatedXFORM function in cmsxform.c in liblcms2.a via a crafted TIFF file. CVE-2018-115567.8tificc in Little CMS 2.9 has an out-of-bounds write in the cmsPipelineCheckAndRetreiveStages function in cmslut.c in liblcms2.a via a crafte CVE-2018-115576.1YIBAN Easy class education platform 2.0 has XSS via the articlelist.php k parameter.CVE-2018-115585.4DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_first_name parameter.CVE-2018-115595.4DomainMod 4.10.0 has Stored XSS in the "/settings/profile/index.php" new_last_name parameter.CVE-2018-11568.8Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability CVE-2018-115609.8The webService binary on Insteon HD IP Camera White 2864-222 devices has a stack-based Buffer Overflow leading to Control-Flow Hijacking via CVE-2018-115617.5An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER (EETHER), an Ethereum ERC20 to