| शीर्षक | PMWeb 7.3.0 stored XSS after bypassing the Web Application Firewall |
|---|
| विवरण | A vulnerability was found in PMWeb 7.3.00 and classified as problematic. Affected by this issue is some unknown functionality of the component Web Application Firewall. The manipulation leads to a stored cross site scripting. The attack may be launched remotely.
A stored Cross-Site Scripting (XSS) vulnerability was discovered in the application, which was successfully exploited after bypassing the Web Application Firewall (WAF) designed to protect against such attacks. This vulnerability allows an attacker to inject malicious scripts into the application, which are then stored on the server and executed in the browsers of unsuspecting users. The exploitation of this flaw could enable the attacker to steal sensitive information, manipulate user sessions, or perform unauthorized actions on behalf of legitimate users. |
|---|
| स्रोत | ⚠️ https://mega.nz/file/nB81xTDB#nfXEjKaCFM9FZAk_wNtkjYSzilpQnPRoQ9SXrdKnB-Y |
|---|
| उपयोगकर्ता | ahmed8199 (UID 60803) |
|---|
| सबमिशन | 21/12/2024 12:20 AM (2 साल पहले) |
|---|
| संयम | 04/01/2025 10:02 AM (14 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 273559 [PMWeb 7.2.00 Web Application Firewall क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|