Cross Site Scripting Vulnerability in qdPM V9.1 by QdPM
CVE-2020-19515

6.1MEDIUM

Key Information:

Vendor

Qdpm

Status
Qdpm
Vendor
CVE Published:
9 September 2021

What is CVE-2020-19515?

qdPM V9.1 contains a Cross Site Scripting (XSS) vulnerability via the database_config.php file in the installation module. Attackers could exploit this weakness to inject malicious scripts into web pages viewed by users, potentially compromising sensitive information and altering user sessions. Proper validation and sanitization measures are recommended to mitigate the risk of this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://topsecalphalab.github.io/CVE/qdPM9.1-Installer-Cr...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.