PT-2022-7719

CVE-2008-10001

Published

2022-03-28

Updated

2024-08-07

Description by

CVSS 3.1

5.5

Medium

MetricsAV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Pro2col Stingray FTS (affected versions not specified)

Description A problematic issue has been found in the software, where the manipulation of the Username argument leads to cross-site scripting. The attack can be initiated remotely. It is noted that this issue only affects products that are no longer supported by the maintainer.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Marc Ruef

Vendors

Affected products

Weakness enumeration

CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Related identifiers