CVE-2021-3243 | BDVDB-2026-152178 Detail

Description#

Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious User-Agent header to inject a payload in its logs, where an attacker can take over the system by through its plugin-running function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://drivertom.blogspot.com/2021/01/wfilter-icf-0day-rce.html

Exploit#

No public exploit known

History#

Version 12021-04-15Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.