Описание
Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network.
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:accounting_journal_management_project:accounting_journal_management:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00209
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
почти 4 года назад
Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-Stored and PHPSESSID attacks. The malicious user can attack the system by using the already session which he has from inside and outside of the network.
EPSS
Процентиль: 43%
0.00209
Низкий
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79