critical9.0Public exploit code
CVE-2023-31703
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- eScan Management Console 14.0.1400.2281 - Cross Site Scripting2023-05-23 · webapps · windows
Impact
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Escanav | Escan Management Console | Version 14.0.1400.2281 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/172540/eScan-Management-Console-14.0.1400.2281-Cross-Site-Scripting.html
- https://github.com/sahiloj/CVE-2023-31703/blob/main/README.md
- http://packetstormsecurity.com/files/172540/eScan-Management-Console-14.0.1400.2281-Cross-Site-Scripting.html
- https://github.com/sahiloj/CVE-2023-31703/blob/main/README.md