Vulnerability Details CVE-2023-49028
Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the lock/lock.php file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.9%
CVSS Severity
CVSS v3 Score 5.4
References
- https://gist.github.com/Chiaki2333/d132c4b169b55bd7cd50e73dbe20c410
- https://github.com/Chiaki2333/vulnerability/blob/main/smpn1smg-absis-XSS-lock.php-user.md
- https://github.com/smpn1smg/absis
- https://gist.github.com/Chiaki2333/d132c4b169b55bd7cd50e73dbe20c410
- https://github.com/Chiaki2333/vulnerability/blob/main/smpn1smg-absis-XSS-lock.php-user.md
- https://github.com/smpn1smg/absis
Products affected by CVE-2023-49028
-
cpe:2.3:a:absis:absis:2016-03-01
-
cpe:2.3:a:absis:absis:2016-03-03
-
cpe:2.3:a:absis:absis:2016-03-07
-
cpe:2.3:a:absis:absis:2016-10-25
-
cpe:2.3:a:absis:absis:2017-03-05
-
cpe:2.3:a:absis:absis:2017-10-19