PoC-CVE-2024-24035

CVE-2024-24035 Titolo Il SIL 3.1 è vulnerabile a Cross Site Scripting XSS nel parametro "hmessage". Data: 2024-01-14 Autore: Elizeu Das Dores Homepage del fornitore: https://www.setorinformatica.com/ Versione: 3.1 POC CVE-2024-24035 Il parametro "hmessage" è vulnerabile a DOM Based Cross Site...

CVE-2024-24035

Cross Site Scripting XSS vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitrary code via the hmessage parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitrary code via the hmessage parameter...

CVE-2024-24035

Cross Site Scripting XSS vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitrary code via the hmessage parameter...

CVE-2024-24035

Cross Site Scripting XSS vulnerability in Setor Informatica SIL 3.1 allows attackers to run arbitrary code via the hmessage parameter...

CVE-2024-24035

Setor Informatica SIL 3.1 contains a Cross Site Scripting (XSS) vulnerability in the hmessage parameter. The issue arises from insufficient filtering/escaping of user-supplied data, enabling arbitrary code execution via the parameter. Documented across multiple sources (NVD/Red Hat CNVD/CNNVD) wi...