exploitDog

CVE-2019-14696

Опубликовано: 06 авг. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Средний

Описание

Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.

Ссылки

http://packetstormsecurity.com/files/153984/Open-School-3.0-Community-Edition-2.3-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://open-school.org
Product
https://pastebin.com/AgxqdbAQ
Third Party Advisory
http://packetstormsecurity.com/files/153984/Open-School-3.0-Community-Edition-2.3-Cross-Site-Scripting.html
Exploit
Third Party Advisory
VDB Entry
https://open-school.org
Product
https://pastebin.com/AgxqdbAQ
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:open-school:open-school:2.3:*:*:*:community:*:*:*

cpe:2.3:a:open-school:open-school:3.0:*:*:*:-:*:*:*

EPSS

Процентиль: 94%

0.13448

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-h5f8-834m-8293

CVSS3: 6.1

github

больше 3 лет назад

Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.

EPSS

Процентиль: 94%

0.13448

Средний

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79