medium6.1Public exploit code
CVE-2020-13228
An issue was discovered in Sysax Multi Server 6.90.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sysax MultiServer 6.90 - Reflected Cross Site Scripting2020-06-12 · webapps · multiple
Impact
An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sysax | Multi Server | Version 6.90 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/158062/Sysax-MultiServer-6.90-Cross-Site-Scripting.html
- https://github.com/wrongsid3
- https://github.com/wrongsid3/Sysax-MultiServer-6.90-Multiple-Vulnerabilities/blob/master/README.md
- https://pasteboard.co/J9eE2GQ.png
- http://packetstormsecurity.com/files/158062/Sysax-MultiServer-6.90-Cross-Site-Scripting.html
- https://github.com/wrongsid3
- https://github.com/wrongsid3/Sysax-MultiServer-6.90-Multiple-Vulnerabilities/blob/master/README.md
- https://pasteboard.co/J9eE2GQ.png