Описание
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:kmc_information_systems:caseaware:-:*:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.2527
Средний
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 6.1
github
больше 3 лет назад
An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string.
EPSS
Процентиль: 96%
0.2527
Средний
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79