PHP Server Monitor vulnerable to Cross-site Scripting

Description

References

• nvd.nist.gov/vuln/detail/CVE-2024-5312 · ADVISORY
• PHPMailer/PHPMailer commit ff8718f · WEB
• phpservermon/phpservermon · PACKAGE
• incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-php-server-monitor · WEB

phpservermon/phpservermon의 다른 취약점

• CVE-2021-4241보통 5.3A vulnerability, which was classified as problematic, was found in phpservermon. Affected is the function setUserLoggedIn of the file src/ps…
• CVE-2021-4240보통 5.3A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the…
• CVE-2021-4097보통 5.4phpservermon is vulnerable to Improper Neutralization of CRLF Sequences
• CVE-2018-18921보통 6.5PHP Server Monitor before 3.3.2 has CSRF, as demonstrated by a Delete action.