PT-2018-10092 · Synametrics · Synaman

Bzyo · Publicado 2018-09-14 · Atualizado 2018-11-09 · CVE-2018-10763

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities can be exploited via the Main heading or Sub heading fields in the Partial Branding configuration page.

Recommendations For Synametrics SynaMan version 4.0 build 1488, consider restricting access to the Partial Branding configuration page until a fix is available. As a temporary workaround, avoid using the Main heading and Sub heading fields in the Partial Branding configuration page to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-10763

Produtos afetados

Synaman

Referências · 4

• 🔥 https://exploit-db.com/exploits/45386 · Exploit
• 🔥 http://packetstormsecurity.com/files/149324/SynaMan-4.0-Build-1488-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-10763 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10763 · Nota de Segurança