PT-2017-14304 · Simple Asc · Simple Asc Content Management System

Benjamin Kunz Mejri · Published 2017-10-28 · Updated 2020-09-16 · CVE-2017-15947

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple ASC Content Management System version 1.2

Description The issue is related to a XSS in the location field in the sign function. It affects files such as guestbook.asp, formgb.asp, and msggb.asp.

Recommendations For Simple ASC Content Management System version 1.2, consider disabling the sign function until a patch is available to prevent exploitation of the XSS vulnerability in the location field. Restrict access to the affected files, specifically guestbook.asp, formgb.asp, and msggb.asp, to minimize the risk of exploitation. Avoid using the location field in the sign function until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-15947

Affected Products

Simple Asc Content Management System

References · 3

• 🔥 https://vulnerability-lab.com/get_content.php?id=2072 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-15947 · Security Note
• https://osv.dev/vulnerability/CVE-2017-15947 · Vendor Advisory