Lucene search
K

CVE-2020-18470

🗓️ 26 Aug 2021 17:28:46Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

Stored XSS vulnerability in application name field in Rukovoditel 2.4.1

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2020-18470
26 Aug 202122:27
circl
CNNVD
Rukovoditel 跨站脚本漏洞
26 Aug 202100:00
cnnvd
Cvelist
CVE-2020-18470
26 Aug 202117:28
cvelist
EUVD
EUVD-2020-10394
7 Oct 202500:30
euvd
NVD
CVE-2020-18470
26 Aug 202118:15
nvd
OSV
CVE-2020-18470
26 Aug 202118:15
osv
Prion
Cross site scripting
26 Aug 202118:15
prion
RedhatCVE
CVE-2020-18470
22 May 202516:27
redhatcve
NVD
ParameterPositionPathDescriptionCWE
website_namerequest bodyrukovoditel_2.4.1/install/index.phpStored cross-site scripting (XSS) vulnerability in the Name of application field found in the General Configuration page in Rukovoditel 2.4.1 allows remote attackers to inject arbitrary web script or HTML via a crafted website name by doing an authenticated POST HTTP request to rukovoditel_2.4.1/install/index.php.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 02:59Current
5.1Medium risk
Vulners AI Score5.1
CVSS 23.5
CVSS 3.15.4
EPSS0.00515
41