Описание
Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users. admin.php contains a hidden base64-encoded string with these credentials.
Ссылки
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2022-02-05 (исключая)
cpe:2.3:a:jqueryform:jqueryform:*:*:*:*:*:*:*:*
EPSS
Процентиль: 49%
0.00257
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-522
Связанные уязвимости
github
почти 4 года назад
Forms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to access the cleartext credentials of all other form users. admin.php contains a hidden base64-encoded string with these credentials.
EPSS
Процентиль: 49%
0.00257
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-522