CVE-2019-1010028

EPSS 0.7%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

15 jul 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

phpscriptsmall.com School College Portal with ERP Script 2.6.1 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Attack administrators and teachers, students and more. The component is: /pro-school/index.php?student/message/send_reply/. The attack vector is: <img src=x onerror=alert(document.domain) />.

Produtos afetados

PHP Scripts Mall Pvt. Ltd. · School College Portal with ERP Script

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://whitehatck01.blogspot.com/2018/02/school-college-portal-with-erp-script.html