Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4v27-cw49-q24f

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.

List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.

EPSS

Процентиль: 90%
0.05535
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
около 22 лет назад

List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" (pipe), which is used as a field delimiter, into the bannerurl field.

EPSS

Процентиль: 90%
0.05535
Низкий

Дефекты

CWE-20