medium6.1Public exploit code
CVE-2019-6965
An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- i-doit 1.12 - 'qr.php' Cross-Site Scripting2019-03-28 · webapps · php
Impact
An XSS issue was discovered in i-doit Open 1.12 via the src/tools/php/qr/qr.php url parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| I-Doit | I-Doit | Version 1.12 |