Lucene search
+L

3 matches found

NVD
NVD
•added 2023/10/14 11:15 a.m.•17 views

CVE-2023-5578

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the input ";' alertdocument.cookie results in cross site scripting...

5.4CVSS4.2AI score0.00416EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2023/10/14 10:31 a.m.•32 views

CVE-2023-5578 Portábilis i-Educar HTTP GET Request agenda_imprimir.php cross site scripting

A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agendaimprimir.php of the component HTTP GET Request Handler. The manipulation of the argument codagenda with the input ";' alertdocument.cookie results in cross site scripting...

5.1CVSS5.4AI score0.00416EPSS
SaveExploits0References6
CVE
CVE
•added 2023/10/14 10:31 a.m.•88 views

CVE-2023-5578

CVE-2023-5578 affects Portábilis i-Educar up to 2.7.5. The vulnerability is a cross-site scripting flaw in the HTTP GET Request Handler, specifically in the file intranet\agenda_imprimir.php, where the cod_agenda parameter can be injected with a payload like );'> . Remote exploitation is possi...

5.4CVSS3.6AI score0.00416EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder