Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qw3x-33f8-7ff3

Опубликовано: 21 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters.

Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters.

EPSS

Процентиль: 37%
0.0016
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
7 месяцев назад

Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters.

EPSS

Процентиль: 37%
0.0016
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79