PT-2024-33171 · Sage · Sage 1000

Published 2024-10-20 · Updated 2025-06-27 · CVE-2024-48648

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Sage 1000 version 7.0.0

Description A Reflected Cross-Site Scripting issue exists, allowing attackers to inject malicious scripts into URLs. These scripts are reflected back by the server in the response without proper sanitization or encoding.

Recommendations For Sage 1000 version 7.0.0, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-48648

Affected Products

Sage 1000

References · 6

• 🔥 https://github.com/hx381/Sage-1000-v7.0.0-Exploit/blob/main/README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-48648 · Security Note
• https://osv.dev/vulnerability/CVE-2024-48648 · Vendor Advisory
• https://t.me/cvenotify/126949 · Telegram Post
• https://t.me/cvedetector/9451 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1848068852728430996 · Twitter Post