CVE-2019-11370

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Carel pCOWeb < B1.2.1 - Cross-Site Scripting2019-05-22 · webapps · hardware

Impact

Stored XSS was discovered in Carel pCOWeb prior to B1.2.4, as demonstrated by the config/pw_snmp.html "System contact" field.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://drive.google.com/open?id=1WkmtsCVNCtxwWH2fe9DtHow_Nedp1a7j
• https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370
• https://drive.google.com/open?id=1WkmtsCVNCtxwWH2fe9DtHow_Nedp1a7j
• https://github.com/nepenthe0320/cve_poc/blob/master/CVE-2019-11370