CVEs-PoC/2015/CVE-2015-1159.md

CVE-2015-1159

Description

Cross-site scripting (XSS) vulnerability in the cgi_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the QUERY parameter to help/.

POC

Reference

• http://www.kb.cert.org/vuls/id/810572
• http://www.ubuntu.com/usn/USN-2629-1
• https://www.cups.org/str.php?L4609

Github

• https://github.com/ARPSyndicate/cve-scores