PT-2019-9660
CVE-2018-18880
·
تاريخ النشر
2019-06-18
·
تاريخ التحديث
2019-06-18
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Columbia Weather MicroServer version MS 2.6.9900
Description
A reflected Cross-site scripting (XSS) vulnerability in the networkdiags.php file allows remote authenticated users to inject arbitrary web script.
Recommendations
For version MS 2.6.9900, consider restricting access to the networkdiags.php file until a patch is available. As a temporary workaround, avoid using the networkdiags.php file to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾