What’s Vulnerable › Vulnerabilities

CVE-2017-0378

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-07-20 · updated 2026-06-17
• Weakness: CWE-79

Description

XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php.

Affected products

• phamm before 0.6.7: through 0.6.6

References

• http://www.openwall.com/lists/oss-security/2017/07/20/3
• http://www.phamm.org/docs/CHANGELOG
• http://www.securityfocus.com/bid/99927
• https://bugs.debian.org/868988
• https://github.com/lota/phamm/issues/21
• http://www.openwall.com/lists/oss-security/2017/07/20/3
• http://www.phamm.org/docs/CHANGELOG
• http://www.securityfocus.com/bid/99927
• https://bugs.debian.org/868988
• https://github.com/lota/phamm/issues/21

Get alerted when CVE-2017-0378 or the next vulnerability affects your stack