Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fvwj-m5w2-xrx6

Опубликовано: 25 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.

Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.

EPSS

Процентиль: 74%
0.0084
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

Cross Site Scripting vulnerability in Service Provider Management System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the firstname, middlename and lastname parameters in the /php-spms/admin/?page=user endpoint.

EPSS

Процентиль: 74%
0.0084
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-79