PHP Server Monitor vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-5312 · ADVISORY
• PHPMailer/PHPMailer commit ff8718f · WEB
• phpservermon/phpservermon · PACKAGE
• incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-php-server-monitor · WEB

phpservermon/phpservermon のその他の脆弱性

• CVE-2021-4241中 5.3A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/ps…
• CVE-2021-4240中 5.3A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the…
• CVE-2021-4097中 5.4phpservermon is vulnerable to Improper Neutralization of CRLF Sequences
• CVE-2018-18921中 6.5PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.