Get a Pentest and security assessment of your IT network.

2021-current

CVE-2020-24963 – An Authenticated Persistent XSS vulnerability was discovered in the Best

An Authenticated Persistent XSS vulnerability was discovered in the Best Support System, tested version v3.0.4.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24963

Reference (s):

  • https://ex-mi.ru/exploit/[2020-08-23]-[PHP]-best-support-system-v3.0.4.txt
  • https://medium.com/@ex.mi/php-best-support-system-v3-0-4-authenticated-persistent-xss-dfe6d4a06f75
Related posts
2021-current

CVE-2004-1715 - Directory traversal vulnerability in MIMEsweeper for Web before 5.0.4 all

2021-current

CVE-2014-6594 - Unspecified vulnerability in the Oracle iLearning component in Oracle iLe

2021-current

CVE-2019-8457 - SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-b

2021-current

CVE-2020-12257 - rConfig 3.9.4 is vulnerable to cross-site request forgery (CSRF) because