medium6.1Public exploit code
CVE-2019-10846
Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Computrols CBAS-Web 19.0.0 - 'username' Reflected Cross-Site Scripting2019-11-12 · webapps · hardware
Impact
Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Computrols | Computrols Building Automation System | through 19.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155257/Computrols-CBAS-Web-19.0.0-Cross-Site-Scripting.html
- https://applied-risk.com/index.php/download_file/view/196/165
- https://applied-risk.com/labs/advisories
- http://packetstormsecurity.com/files/155257/Computrols-CBAS-Web-19.0.0-Cross-Site-Scripting.html
- https://applied-risk.com/index.php/download_file/view/196/165
- https://applied-risk.com/labs/advisories