MedDream PACS Premium Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the config.php functionality of MedDream PACS Premium version 7.3.6.870. This vulnerability allows for the execution of arbitrary JavaScript code through specially crafted URLs. The issue arises in the thumbnaildir parameter, which is not properly sanitized before being outputted to the user.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject and execute malicious JavaScript in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a POST request to the config.php script with the thumbnaildir parameter set to a crafted value, such as a script tag containing JavaScript code. If the specified directory does not exist, the injected script will be executed when the response is rendered in the browser.

Remediation

Users are advised to update to the patched version released by the vendor.