CVE-2017-20100

A vulnerability was found in Air Transfer 1.0.14/1.2.1. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to basic cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
Link Resource
https://vuldb.com/?id.97280 Third Party Advisory
https://www.vulnerability-lab.com/get_content.php?id=2035 Exploit Third Party Advisory
https://vuldb.com/?id.97280 Third Party Advisory
https://www.vulnerability-lab.com/get_content.php?id=2035 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:air_transfer_project:air_transfer:1.0.14:*:*:*:*:ipad:*:*
cpe:2.3:a:air_transfer_project:air_transfer:1.0.14:*:*:*:*:iphone_os:*:*
cpe:2.3:a:air_transfer_project:air_transfer:1.2.1:*:*:*:*:ipad:*:*
cpe:2.3:a:air_transfer_project:air_transfer:1.2.1:*:*:*:*:iphone_os:*:*

History

21 Nov 2024, 03:22

Type Values Removed Values Added
CVSS v2 : 4.3
v3 : 6.1
v2 : 4.3
v3 : 3.5
References () https://vuldb.com/?id.97280 - Third Party Advisory () https://vuldb.com/?id.97280 - Third Party Advisory
References () https://www.vulnerability-lab.com/get_content.php?id=2035 - Exploit, Third Party Advisory () https://www.vulnerability-lab.com/get_content.php?id=2035 - Exploit, Third Party Advisory

06 Jul 2022, 19:48

Type Values Removed Values Added
References (MISC) https://vuldb.com/?id.97280 - (MISC) https://vuldb.com/?id.97280 - Third Party Advisory
References (MISC) https://www.vulnerability-lab.com/get_content.php?id=2035 - (MISC) https://www.vulnerability-lab.com/get_content.php?id=2035 - Exploit, Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 6.1
CPE cpe:2.3:a:air_transfer_project:air_transfer:1.0.14:*:*:*:*:iphone_os:*:*
cpe:2.3:a:air_transfer_project:air_transfer:1.0.14:*:*:*:*:ipad:*:*
cpe:2.3:a:air_transfer_project:air_transfer:1.2.1:*:*:*:*:ipad:*:*
cpe:2.3:a:air_transfer_project:air_transfer:1.2.1:*:*:*:*:iphone_os:*:*
CWE CWE-79

27 Jun 2022, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-06-27 14:15

Updated : 2024-11-21 03:22


NVD link : CVE-2017-20100

Mitre link : CVE-2017-20100

CVE.ORG link : CVE-2017-20100


JSON object : View

Products Affected

air_transfer_project

  • air_transfer
CWE
CWE-80

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')