CVE-2020-36637 - Chris92de AdminServ adminserv.php cross site scripting

Back Back to CVE browser

MEDIUM

Chris92de AdminServ adminserv.php cross site scripting

Published Dec 30, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.54%

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Chris92de AdminServ. It has been declared as problematic. This vulnerability affects unknown code of the file resources/core/adminserv.php. The manipulation of the argument text leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7. It is recommended to apply a patch to fix this issue. VDB-217042 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor Chris92de Product AdminServ Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Chris92de

AdminServ

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://github.com/Chris92de/AdminServ/commit/3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7
patch
https://github.com/Chris92de/AdminServ/pull/7
issue-trackingPatch
https://vuldb.com/?ctiid.217042
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217042
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://github.com/Chris92de/AdminServ/commit/3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7		patch
https://github.com/Chris92de/AdminServ/pull/7		issue-trackingPatch
https://vuldb.com/?ctiid.217042		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217042		vdb-entrytechnical-descriptionThird Party Advisory