PT-2023-27839 · Usermin · Usermin
CVE-2023-41163
·
Publicado
2023-08-30
·
Atualizado
2023-09-05
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Usermin version 2.000
Description
A Reflected Cross-site scripting (XSS) issue in the file manager tab allows remote attackers to inject arbitrary web script or HTML via the
replace in results field while replacing the results under the tools drop down.Recommendations
For Usermin version 2.000, consider disabling the file manager tab or restricting access to it until a patch is available. As a temporary workaround, avoid using the
replace in results field in the file manager tab under the tools drop down.Exploit
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Usermin