medium6.1Public exploit code
CVE-2018-12234
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adrenalin Core HCM 5.4.0 - 'strAction' Reflected Cross-Site Scripting2019-11-12 · webapps · aspx
Impact
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myadrenalin | Adrenalin | Version 5.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
- https://www.knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.html
- https://www.securethy.com/2018/09/first-cve-2018-12234-reflected-XSS.html
- https://www.thecysec.in/2020/04/xxs-adrenalin-generalinfo-cve-id.html
- http://packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
- https://www.knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.html
- https://www.thecysec.in/2020/04/xxs-adrenalin-generalinfo-cve-id.html