CVE-2020-36638 - Chris92de AdminServ adminserv.php cross site scripting

Back Back to CVE browser

MEDIUM

Chris92de AdminServ adminserv.php cross site scripting

Published Dec 30, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.54%

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Chris92de AdminServ. It has been rated as problematic. This issue affects some unknown processing of the file resources/core/adminserv.php. The manipulation of the argument error leads to cross site scripting. The attack may be initiated remotely. The patch is named 9a45087814295de6fb3a3fe38f96293665234da1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217043. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor Chris92de Product AdminServ Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Chris92de

AdminServ

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-24092
Advisory
https://github.com/Chris92de/AdminServ/commit/9a45087814295de6fb3a3fe38f96293665234da1
patch
https://github.com/Chris92de/AdminServ/pull/6
issue-trackingPatch
https://vuldb.com/?ctiid.217043
signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217043
vdb-entrytechnical-descriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-24092		Advisory
https://github.com/Chris92de/AdminServ/commit/9a45087814295de6fb3a3fe38f96293665234da1		patch
https://github.com/Chris92de/AdminServ/pull/6		issue-trackingPatch
https://vuldb.com/?ctiid.217043		signaturepermissions-requiredThird Party Advisory
https://vuldb.com/?id.217043		vdb-entrytechnical-descriptionThird Party Advisory