PT-2018-13982
CVE-2018-17321
·
تاريخ النشر
2018-09-22
·
تاريخ التحديث
2018-11-07
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SeaCMS version 6.64
Description
A security issue was found in the software. Cross-site scripting (XSS) exists in the
admin datarelate.php file via the time or maxHit parameter in a dorandomset action.Recommendations
For SeaCMS version 6.64, consider restricting access to the
admin datarelate.php file or avoiding the use of the time and maxHit parameters in the dorandomset action until a fix is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾