Отправить #311808: https://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site ScriptingИнформация

Названиеhttps://www.emlog.net/ Emlog Pro 2.2.10 Cross-Site Scripting
ОписаниеEmlog Pro 2.2.10 /admin/tag.php exsits Stored XSS Vulnerability.XSS attacks can be used to steal sensitive information from users, such as session tokens, cookies, or personal data. Attackers can inject malicious scripts that send this information to their own servers, effectively compromising user accounts and privacy.In the Dice CMS system, it's possible to steal the administrator's cookie, thereby taking over the account.
Источник⚠️ https://github.com/fubxx/CVE/blob/main/Emlog-XSS2.md
Пользователь
 LIYU (UID 67244)
Представление07.04.2024 04:24 (3 лет назад)
Модерация14.04.2024 05:44 (7 days later)
Статуспринято
Запись VulDB260603 [Emlog Pro 2.2.10 Post Tag /admin/tag.php межсайтовый скриптинг]
Баллы19

Do you know our Splunk app?

Download it now for free!