CVE-2024-11240

CVE-2024-11240 affects IBPhoenix ibWebAdmin up to 1.0.2. The vulnerability is in the /database.php handler, where manipulating the parameter db_login_role enables cross‑site scripting. Exploitation is possible remotely and has been disclosed publicly. Connected sources provide concrete details on...