PT-2025-53319 · Ave S.P.A. · Dominaplus

CVE-2019-25233 · Publicado 2025-12-24 · Atualizado 2025-12-24

Mitre

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AVE DOMINAplus 1.10.x contains cross-site request forgery and cross-site scripting vulnerabilities that allow attackers to perform administrative actions without user consent. Attackers can craft malicious web pages to exploit login.php parameters and execute arbitrary scripts in user browser sessions.

Exploit

Correção

CSRF

XSS

Enumeração de Fraquezas

CWE-352

CWE-79

Identificadores relacionados

CVE-2019-25233

Produtos afetados

Dominaplus

Referências · 5

• 🔥 https://exploit-db.com/exploits/47821 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2019-5547.php · Exploit
• https://domoticaplus.it · Nota
• https://ave.it · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25233 · Nota de Segurança