QwikSec

Security Database

CVE

CWE

Training

CVE-2017-12460

Published: Oct 30, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered in Barco ClickShare CSM-1 firmware before v1.7.0.3 and CSC-1 firmware before v1.10.0.10. An authenticated user can manage the wallpaper collection in the webUI to be shown as background on the ClickShare product. By uploading a wallpaper with a specially crafted name, an HTML injection can be triggered as special characters are not neutralized before output.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.barco.com/en/support/software/R33050020

x_refsource_CONFIRM

https://www.barco.com/en/support/knowledge-base/KB5169

x_refsource_CONFIRM

https://www.barco.com/en/Support/software/R33050037

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.