Описание
A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-9145
- https://github.com/KarinaGante/KGSec/blob/main/CVEs/Scada-LTS/5.md
- https://github.com/KarinaGante/KGSec/blob/main/CVEs/Scada-LTS/5.md#poc
- https://karinagante.github.io/cve-2025-9145
- https://karinagante.github.io/cve-2025-9145/#proof-of-concept-poc
- https://vuldb.com/?ctiid.320523
- https://vuldb.com/?id.320523
- https://vuldb.com/?submit.628448
Связанные уязвимости
A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file view_edit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Уязвимость многоплатформенного веб-решения для создания Scada-систем Scada-LTS, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки