PT-2023-30064 · Fancms · Fancms

Pwncyn · Publicado 2023-10-27 · Atualizado 2023-11-03 · CVE-2023-46505

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FanCMS version 1.0.0

Description A Cross Site Scripting issue allows an attacker to execute arbitrary code via the content1 parameter in the "demo.php" file.

Recommendations For FanCMS version 1.0.0, avoid using the content1 parameter in the demo.php file until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-46505

Produtos afetados

Fancms

Referências · 3

• 🔥 https://github.com/PwnCYN/FanCMS/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-46505 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-46505 · Aviso do Fabricante