| शीर्षक | Astun Technology iShare Maps 5.4.0 Cross Site Scripting |
|---|
| विवरण | A reflected Cross-Site Scripting (XSS) vulnerability was discovered in the iShare Maps platform by Astun Technology, as used by the Dudley Metropolitan Borough Council website. The issue occurs in the Zoom parameter of the historic1.asp page, allowing attackers to inject and execute arbitrary JavaScript in the context of the user's browser. This vulnerability can be exploited remotely and may lead to session hijacking, phishing, or other malicious actions. The affected instance displays "Powered by iShare", confirming the use of the iShare platform. |
|---|
| स्रोत | ⚠️ https://example.com/custom/historic1.asp?Zoom=wwww'%3E</script><img src="x" onerror=confirm(1)> |
|---|
| उपयोगकर्ता | Alexandre Rodrigo (UID 76412) |
|---|
| सबमिशन | 22/05/2025 05:04 AM (1 वर्ष पहले) |
|---|
| संयम | 30/05/2025 01:31 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 310670 [Astun Technology iShare Maps 5.4.0 historic1.asp Zoom क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|