PT-2019-7179 · Accentis · Accentis Content Resource Management System
Publicado
2019-12-09
·
Atualizado
2019-12-11
·
CVE-2015-3425
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Accentis Content Resource Management System versions prior to October 2015 patch
Description
A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the
ctl00$cph content$ uig formState parameter. This can lead to the execution of malicious code on the victim's browser.Recommendations
For versions prior to the October 2015 patch, update to a version that includes the October 2015 patch or later to resolve the issue. As a temporary workaround, consider restricting access to the
ctl00$cph content$ uig formState parameter to minimize the risk of exploitation.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Accentis Content Resource Management System