PT-2019-15402 · Clonos · Clonos Web Control Panel

Published 2019-10-24 · Updated 2019-10-31 · CVE-2019-18419

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ClonOS WEB control panel version 19.09

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the lang parameter in the "index.php" file.

Recommendations For ClonOS WEB control panel version 19.09, consider restricting access to the lang parameter in the index.php file until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-18419

Affected Products

Clonos Web Control Panel

References · 3

• 🔥❌ https://github.com/Andhrimnirr/ClonOS-WEB-control-panel-multi-vulnerability · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2019-18419 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18419 · Vendor Advisory