PT-2018-10092 · Synametrics · Synaman

Bzyo · Published 2018-09-14 · Updated 2018-11-09 · CVE-2018-10763

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Synametrics SynaMan version 4.0 build 1488

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities can be exploited via the Main heading or Sub heading fields in the Partial Branding configuration page.

Recommendations For Synametrics SynaMan version 4.0 build 1488, consider restricting access to the Partial Branding configuration page until a fix is available. As a temporary workaround, avoid using the Main heading and Sub heading fields in the Partial Branding configuration page to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-10763

Affected Products

Synaman

References · 4

• 🔥 https://exploit-db.com/exploits/45386 · Exploit
• 🔥 http://packetstormsecurity.com/files/149324/SynaMan-4.0-Build-1488-Cross-Site-Scripting.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-10763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10763 · Security Note