Описание
A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisher_edit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisher_edit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2025-9144
- https://github.com/KarinaGante/KGSec/blob/main/CVEs/Scada-LTS/4.md
- https://karinagante.github.io/cve-2025-9144
- https://karinagante.github.io/cve-2025-9144/#proof-of-concept-poc
- https://vuldb.com/?ctiid.320522
- https://vuldb.com/?id.320522
- https://vuldb.com/?submit.628445
Связанные уязвимости
A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisher_edit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Уязвимость многоплатформенного веб-решения для создания Scada-систем Scada-LTS, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю проводить межсайтовые сценарные атаки