CVE-2019-9839

概要

参考情報

• packetstormsecurity.com/files/153103/VFront-0.99.5-Reflective-Cross-Site-Scripting.html · Exploit
• netsparker.com/web-applications-advisories · Exploit

vfront のその他の脆弱性

• CVE-2021-39420中 6.1Multiple Cross Site Scripting (XSS) vulnerabilities exist in VFront 0.99.5 via the (1) s parameter in search_all.php and the (2) msg paramet…
• CVE-2019-9838中 6.1VFront 0.99.5 has stored XSS via the admin/sync_reg_tab.php azzera parameter, which is mishandled during admin/error_log.php rendering.