Cross Site Scripting in Ari Adminer Affected by Remote Code Execution
CVE-2020-19156

5.4MEDIUM

Key Information:

Vendor

Ari-soft

Status
Ari Adminer
Vendor
CVE Published:
15 September 2021

What is CVE-2020-19156?

Ari Adminer v1 is susceptible to a Cross Site Scripting vulnerability that allows remote attackers to manipulate the 'Title' parameter through the 'Add New Connections' feature. By leveraging this flaw, attackers could execute arbitrary scripts within the context of the user’s session. This vulnerability highlights the risks associated with web application functionalities that fail to sanitize user inputs properly.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.seebug.org/vuldb/ssvid-97852
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.