Описание
A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter.
Ссылки
- ExploitThird Party Advisory
- Broken Link
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpgurukul:land_record_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 84%
0.02116
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 9.8
github
около 1 года назад
A Cross Site Scripting (XSS) vulnerability was found in /landrecordsys/admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the "pagetitle" parameter.
EPSS
Процентиль: 84%
0.02116
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-79