| शीर्षक | ibwebadmin <= 1.0.2 Cross Site Scripting |
|---|
| विवरण | A reflected cross-site scripting (XSS) vulnerability was identified in the "ibwebadmin" database management application version 1.0.2 and earlier. This vulnerability occurs due to improper sanitization of the "db_login_role" parameter, which is sent via POST request and embedded directly into the page’s source code. As a result, an attacker could inject malicious JavaScript code into the page, breaking the application’s intended syntax and potentially allowing for unauthorized actions or data access.
By using Google Dorks, it is possible to find several applications exposed that utilize the system for Firebird database administration, including some hosting providers, such as "Kinghost":
"http://firebird.kinghost.com.br/"
"http://firebirdadmin.infonet.com.br/" |
|---|
| स्रोत | ⚠️ https://docs.google.com/document/d/1_kk14QhqJuqMGzAD_SUlOSvCGwYdeF4gI8m7mVTPBAQ/edit?usp=sharing |
|---|
| उपयोगकर्ता | gabriel (UID 72007) |
|---|
| सबमिशन | 06/11/2024 05:57 PM (2 साल पहले) |
|---|
| संयम | 15/11/2024 08:14 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 284675 [IBPhoenix ibWebAdmin तक 1.0.2 Banco de Dados Tab /database.php db_login_role क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|