Описание
phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection creation to execute arbitrary JavaScript in users' browsers.
Ссылки
- Product
- ExploitVDB Entry
- https://www.vulncheck.com/advisories/phpmoadmin-stored-cross-site-scripting-via-collection-parameterThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpmoadmin:phpmoadmin:1.1.5:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.00244
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 7.2
github
5 месяцев назад
phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter. Attackers can send GET requests to moadmin.php with script payloads in the collection parameter during collection creation to execute arbitrary JavaScript in users' browsers.
EPSS
Процентиль: 16%
0.00244
Низкий
6.1 Medium
CVSS3
Дефекты
CWE-79