PT-2022-9031 · Unknown · Chris92De Adminserv

Chris92De · Published 2022-12-30 · Updated 2024-08-04 · CVE-2020-36637

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Chris92de AdminServ (affected versions not specified)

Description A vulnerability was found in Chris92de AdminServ, affecting unknown code of the file resources/core/adminserv.php. The manipulation of the text argument leads to cross-site scripting. The attack can be initiated remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-36637

Affected Products

Chris92De Adminserv

References · 10

• https://github.com/Chris92de/AdminServ/commit/3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7 · Patch
• https://github.com/Chris92de/AdminServ/pull/7 · Patch
• https://osv.dev/vulnerability/CVE-2020-36637 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36637 · Security Note
• https://t.me/cibsecurity/55558 · Telegram Post
• https://t.me/cvenotify/41018 · Telegram Post
• https://t.me/cvenotify/41009 · Telegram Post
• https://t.me/cvenotify/64312 · Telegram Post
• https://vuldb.com/?id.217042 · Note
• https://vuldb.com/?ctiid.217042 · Note