Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Lamsfoundation Subscribe
Filtered by product Lams
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12090 1 Lamsfoundation 1 Lams 2019-03-08 4.3 MEDIUM 6.1 MEDIUM
There is unauthenticated reflected cross-site scripting (XSS) in LAMS before 3.1 that allows a remote attacker to introduce arbitrary JavaScript via manipulation of an unsanitized GET parameter during a forgotPasswordChange.jsp?key= password change.