إرسال #582841: Astun Technology iShare Maps 5.4.0 Cross Site Scriptingالمعلومات

عنوانAstun Technology iShare Maps 5.4.0 Cross Site Scripting
الوصفA reflected Cross-Site Scripting (XSS) vulnerability was identified in the iShare Maps platform by Astun Technology, affecting the Dudley Metropolitan Borough Council website. The vulnerability exists in the atTxtStreet parameter of the mycouncil2.aspx page, allowing an attacker to inject and execute arbitrary JavaScript code in users’ browsers. This flaw can lead to session hijacking, phishing, or other malicious client-side attacks without requiring authentication.
المصدر⚠️ https://example.com/mycouncil2.aspx?atTxtStreet=wwww'-alert(1)-'
المستخدم
 Alexandre Rodrigo (UID 76412)
ارسال22/05/2025 05:19 AM (11 أشهر منذ)
الاعتدال30/05/2025 01:31 PM (8 days later)
الحالةتمت الموافقة
إدخال VulDB310671 [Astun Technology iShare Maps 5.4.0 mycouncil2.aspx atTxtStreet البرمجة عبر المواقع]
النقاط17

Want to know what is going to be exploited?

We predict KEV entries!