medium6.1Public exploit code
CVE-2022-36664
Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Password Manager for IIS v2.0 - XSS2023-03-25 · webapps · asp
Impact
Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adiscon | Password Manager For Iis | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://passwordmanager.adiscon.com/en/manual/
- https://packetstormsecurity.com/files/168599/Password-Manager-For-IIS-2.0-Cross-Site-Scripting.html
- http://passwordmanager.adiscon.com/en/manual/
- https://packetstormsecurity.com/files/168599/Password-Manager-For-IIS-2.0-Cross-Site-Scripting.html