| 제목 | Astun Technology iShare Maps 5.4.0 Cross Site Scripting |
|---|
| 설명 | A reflected Cross-Site Scripting (XSS) vulnerability was identified in the iShare Maps platform by Astun Technology, affecting the Dudley Metropolitan Borough Council website. The vulnerability exists in the atTxtStreet parameter of the mycouncil2.aspx page, allowing an attacker to inject and execute arbitrary JavaScript code in users’ browsers. This flaw can lead to session hijacking, phishing, or other malicious client-side attacks without requiring authentication. |
|---|
| 원천 | ⚠️ https://example.com/mycouncil2.aspx?atTxtStreet=wwww'-alert(1)-' |
|---|
| 사용자 | Alexandre Rodrigo (UID 76412) |
|---|
| 제출 | 2025. 05. 22. AM 05:19 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 05. 30. PM 01:31 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 310671 [Astun Technology iShare Maps 5.4.0 mycouncil2.aspx atTxtStreet 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|