Логотип exploitDog
bind:CVE-2025-7728
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-7728

Количество 3

Количество 3

nvd логотип

CVE-2025-7728

7 месяцев назад

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. Affected is an unknown function of the file users.shtm. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0.

CVSS3: 3.5
EPSS: Низкий
github логотип

GHSA-p383-92r7-352c

7 месяцев назад

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. Affected is an unknown function of the file users.shtm. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0.

CVSS3: 3.5
EPSS: Низкий
fstec логотип

BDU:2025-15296

7 месяцев назад

Уязвимость файла users.shtm многоплатформенного веб-решения для создания Scada-систем Scada-LTS, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-7728

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. Affected is an unknown function of the file users.shtm. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0.

CVSS3: 3.5
0%
Низкий
7 месяцев назад
github логотип
GHSA-p383-92r7-352c

A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. Affected is an unknown function of the file users.shtm. The manipulation of the argument Username leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this issue and confirmed that it will be fixed in the upcoming release 2.8.0.

CVSS3: 3.5
0%
Низкий
7 месяцев назад
fstec логотип
BDU:2025-15296

Уязвимость файла users.shtm многоплатформенного веб-решения для создания Scada-систем Scada-LTS, позволяющая нарушителю проводить межсайтовые сценарные атаки (XSS)

CVSS3: 5.4
0%
Низкий
7 месяцев назад

Уязвимостей на страницу