CVE-2019-7400

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting2019-03-26 · webapps · php

Impact

Rukovoditel before 2.4.1 allows XSS.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.html
• https://blog.rukovoditel.net/rukovoditel-2-4-1/
• https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/
• https://www.exploit-db.com/exploits/46608/
• http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.html
• https://blog.rukovoditel.net/rukovoditel-2-4-1/
• https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/
• https://www.exploit-db.com/exploits/46608/