| शीर्षक | ibwebadmin ibWebAdmin <= 1.0.2 Cross Site Scripting |
|---|
| विवरण | A reflected XSS vulnerability was discovered in the ibWebAdmin software, version 1.0.2 and earlier. This flaw allows the manipulation of the 'p' parameter in the request, enabling the injection of JavaScript code into the page. If the HttpOnly flag is not properly configured, it is also possible to access session cookies, which could lead to an account takeover.
By using Google Dorks, it is possible to find several applications exposed that utilize the system for Firebird database administration, including some hosting providers, such as "Kinghost":
"http://firebird.kinghost.com.br/"
"http://firebirdadmin.infonet.com.br/"
|
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1h9LlTV1FVvOSDBWc7qwU_5qcboCKd6H99Oqg3rZdBRQ/edit?usp=sharing |
|---|
| उपयोगकर्ता | gabriel (UID 72007) |
|---|
| सबमिशन | 22/10/2024 05:21 PM (2 साल पहले) |
|---|
| संयम | 06/11/2024 05:20 PM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 283325 [IBPhoenix ibWebAdmin तक 1.0.2 Tabelas Section /toggle_fold_panel.php क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|