PT-2019-14870 · Kkcms · Kkcms

Publicado 2019-09-27 · Atualizado 2019-09-27 · CVE-2019-16923

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions kkcms version 1.3

Description The issue is related to a XSS vulnerability in the jx.php file, specifically with the url parameter. This allows for potential exploitation through the "/jx.php?url=" endpoint.

Recommendations For kkcms version 1.3, consider restricting access to the jx.php file or disabling the vulnerable url parameter to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-16923

Produtos afetados

Kkcms

Referências · 3

• 🔥❌ https://github.com/wangyifani/kkcms/issues/2 · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2019-16923 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-16923 · Nota de Segurança