PT-2017-14304 · Simple Asc · Simple Asc Content Management System

Benjamin Kunz Mejri · Publicado 2017-10-28 · Atualizado 2020-09-16 · CVE-2017-15947

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple ASC Content Management System version 1.2

Description The issue is related to a XSS in the location field in the sign function. It affects files such as guestbook.asp, formgb.asp, and msggb.asp.

Recommendations For Simple ASC Content Management System version 1.2, consider disabling the sign function until a patch is available to prevent exploitation of the XSS vulnerability in the location field. Restrict access to the affected files, specifically guestbook.asp, formgb.asp, and msggb.asp, to minimize the risk of exploitation. Avoid using the location field in the sign function until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-15947

Produtos afetados

Simple Asc Content Management System

Referências · 3

• 🔥 https://vulnerability-lab.com/get_content.php?id=2072 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-15947 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-15947 · Aviso do Fabricante