Skip to content
OpenAdvisories
Unscored CVE-2016-10216 EUVD-2016-1401GHSA-9xm4-7vx3-x4r2

An issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to insufficient filtration of user-supplied …

Published Feb 10, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

An issue was discovered in IT ITems DataBase (ITDB) through 1.23. The vulnerability exists due to insufficient filtration of user-supplied data in the "value" HTTP POST parameter passed to the "itdb-1.23/js/DataTables-1.8.2/examples/examples_support/editable_ajax.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.

References