PT-2018-11308 · Adrenalin · Adrenalin 5.4 Hrms

Rishu Ranjan · Publicado 2018-12-20 · Atualizado 2026-03-02 · CVE-2018-12651

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Adrenalin 5.4 HRMS Software (affected versions not specified)

Description A Reflected Cross Site Scripting (XSS) issue was discovered. The user-supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the "ShiftEmployeeSearch.aspx" API endpoint, specifically through the prntFrmName or prntDDLCntrlName parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-12651

Produtos afetados

Adrenalin 5.4 Hrms

Referências · 5

• 🔥 https://knowcybersec.com/2018/12/CVE-2018-12651-reflected-XSS.html · Exploit
• https://t.me/cveNotify/153765 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2018-12651 · Aviso do Fabricante
• https://securethy.com/2018/12/CVE-2018-12651-reflected-XSS.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12651 · Nota de Segurança