Lucene search
China National Vulnerability DatabaseCNVD-2021-103109HistoryNov 09, 2021 - 12:00 a.m.
vfront cross-site scripting vulnerability
2021-11-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
0.001 Low
EPSS
Percentile
35.3%
vfront is a free open source front-end for MySQL or PostgreSQL databases written in PHP and Javascript. vfront version 0.99.5 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site scripting attacks via the s parameter in search_all.php and the msg parameter in add.attach.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vfront vfront | eq | 0.99.5 |
Related
cvelist
cvelist
CVE-2021-39420
2021-11-08 18:07:03
nvd
nvd
CVE-2021-39420
2021-11-08 19:15:07
cve
cve
CVE-2021-39420
2021-11-08 19:15:07
prion
prion
Cross site scripting
2021-11-08 19:15:00