medium6.1
CVE-2019-9838
VFront 0.99.5 has stored XSS via the admin/sync_reg_tab.php azzera parameter, which is mishandled during admin/error_log.php rendering.
Impact
VFront 0.99.5 has stored XSS via the admin/sync_reg_tab.php azzera parameter, which is mishandled during admin/error_log.php rendering.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vfront | Vfront | Version 0.99.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153104/VFront-0.99.5-Persistent-Cross-Site-Scripting.html
- https://www.netsparker.com/web-applications-advisories/
- http://packetstormsecurity.com/files/153104/VFront-0.99.5-Persistent-Cross-Site-Scripting.html
- https://www.netsparker.com/web-applications-advisories/