medium6.1Public exploit code
CVE-2023-36306
A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adiscon LogAnalyzer v.4.1.13 - Cross Site Scripting2023-08-04 · webapps · php
Impact
A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle.php, details.php, index.php, search.php, export.php, reports.php, and statistics.php components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adiscon | Loganalyzer | through 4.1.13 |