PT-2023-26526 · Unknown · Phpscriptpoint Insurance
CVE-2023-3860
·
Publicado
2023-07-24
·
Atualizado
2024-05-17
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
phpscriptpoint Insurance version 1.2
Description
A vulnerability was found in the software, classified as problematic. It affects an unknown function of the file /page.php, leading to cross site scripting. The manipulation can be launched remotely. The vendor was contacted about this disclosure but did not respond.
Recommendations
For phpscriptpoint Insurance version 1.2, consider disabling access to the /page.php file until a patch is available. Restricting the use of unknown functions in this file may also help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Phpscriptpoint Insurance