123Solar 跨站脚本漏洞

123Solar is a set of lightweight PHP/JS files from the individual developer Jean-Marc Louviaux. A cross-site scripting vulnerability exists in 123Solar version 1.8.4.5, which stems from the fact that the parameter date1 in the file /detailed.php causes cross-site scripting...

PT-2024-39361 · 123Solar · 123Solar

Name of the Vulnerable Software and Affected Versions: jeanmarc77 123solar version 1.8.4.5 Description: A critical issue exists in the software, affecting an unknown part of the file config/config invt1.php. The manipulation of the PASSOx argument leads to code injection. This issue can be...