PT-2020-15590
CVE-2020-23832
·
تاريخ النشر
2020-10-06
·
تاريخ التحديث
2020-10-14
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Projectworlds Car Rental Management System version 1.0
Description
A Persistent Cross-Site Scripting (XSS) issue in the message admin.php file allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.
Recommendations
For Projectworlds Car Rental Management System version 1.0, consider disabling access to the message admin.php file until a patch is available to prevent exploitation of the XSS issue. Restrict access to admin login sessions to minimize the risk of session cookie harvesting.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾