VulnCheck KEV: CVE-2024-42852

Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component...

CVE-2024-42852

Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component...

CVE-2024-42852

Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component...

CVE-2024-42852

AcuToWeb server version 10.5.0.7577C8b is vulnerable to a reflected Cross-Site Scripting (XSS) vulnerability. The issue occurs because the index.php component fails to properly sanitize and validate user input, specifically via the portgw parameter. An attacker can exploit this to execute arbitra...

CVE-2024-42852: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in AcuToWeb server v.10.5.0.7577C8b allows a remote attacker to execute arbitrary code via the index.php component...

PT-2024-30185 · Unknown · Acutoweb Server

Name of the Vulnerable Software and Affected Versions: AcuToWeb server version 10.5.0.7577C8b Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the "index.php" component. This enables the attacker to perform unauthorized actions on the affected syste...