PT-2019-15402 · Clonos · Clonos Web Control Panel

Publicado 2019-10-24 · Atualizado 2019-10-31 · CVE-2019-18419

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ClonOS WEB control panel version 19.09

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the "index.php" file.

Recommendations For ClonOS WEB control panel version 19.09, consider restricting access to the lang parameter in the index.php file until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-18419

Produtos afetados

Clonos Web Control Panel

Referências · 3

• 🔥❌ https://github.com/Andhrimnirr/ClonOS-WEB-control-panel-multi-vulnerability · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2019-18419 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-18419 · Aviso do Fabricante