medium6.1Public exploit code
CVE-2018-12653
A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adrenalin Core HCM 5.4.0 - 'ReportID' Reflected Cross-Site Scripting2019-11-12 · webapps · aspx
Impact
A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myadrenalin | Adrenalin | Version 5.4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155244/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
- https://www.knowcybersec.com/2019/02/CVE-2018-12653-reflected-XSS.html
- https://www.securethy.com/2019/02/CVE-2018-12653-reflected-XSS.html
- http://packetstormsecurity.com/files/155244/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.html
- https://www.knowcybersec.com/2019/02/CVE-2018-12653-reflected-XSS.html