Vulners
Lucene search
ETAP Safety Manager 1.0.0.32 Remote Unauthenticated Reflected XSS
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2022-50802 | 31 Dec 202521:03 | – | circl |
 | ETAP Safety Manager 跨站脚本漏洞 | 30 Dec 202500:00 | – | cnnvd |
 | CVE-2022-50802 | 30 Dec 202522:42 | – | cve |
 | CVE-2022-50802 ETAP Safety Manager 1.0.0.32 Unauthenticated Reflected Cross-Site Scripting via Action Parameter | 30 Dec 202522:42 | – | cvelist |
 | EUVD-2022-55923 | 31 Dec 202500:31 | – | euvd |
 | CVE-2022-50802 | 30 Dec 202523:15 | – | nvd |
 | CVE-2022-50802 | 30 Dec 202523:15 | – | osv |
 | PT-2025-54249 | 30 Dec 202500:00 | – | ptsecurity |
 | CVE-2022-50802 ETAP Safety Manager 1.0.0.32 Unauthenticated Reflected Cross-Site Scripting via Action Parameter | 30 Dec 202522:42 | – | vulnrichment |
<html><body><p>ETAP Safety Manager 1.0.0.32 Remote Unauthenticated Reflected XSS
Vendor: ETAP Lighting International NV
Product web page: https://www.etaplighting.com
Affected version: 1.0.0.32
Summary: The ETAP Safety Manager (ESM) is a central managing and control
system that helps you to monitor, adjust and maintain your emergency lighting
system. Therefore each luminaire connected to your ESM network is given a
unique code. The ESM can easily identify the luminaires individually and
automatically report whether all luminaires work properly. You can either
choose between a wired or wireless network, or a combination of both. With
ESM you will not only manage your self contained or your centrally supplied
‘ETAP Battery System’ (EBS) emergency luminaires’, but also DALI emergency
units and K9 LED modules, which you can build into your luminaires. Since
your ESM system is connected to the Internet, you will always have access
to it through the World Wide Web. ESMweb™ is an ‘embedded web server’
application for monitoring an emergency lighting system, which runs in the
‘ESM web controller’. The ESMweb™ application can be accessed from any PC
in the corporate network or connected to the Internet - by a standard web
browser.
Desc: Input passed to the GET parameter 'action' is not properly sanitised
before being returned to the user. This can be exploited to execute arbitrary
HTML/JS code in a user's browser session in context of an affected site.
Tested on: Apache/2.4.41 (Ubuntu)
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience
Advisory ID: ZSL-2022-5711
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5711.php
22.08.2022
--
PoC:
GET /json/authenticate.php?action=[XSS]&username=waddup&password=nm HTTP/1.1
{"success":false,"errorMessage":"Invalid command: $","errorCode":0,"errorInfo":"\/var\/www\/etap-root\/scripts\/class.dispatch.php(39)","rows":[]}
</p></body></html>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Sep 2022 00:00Current
6.1Medium risk
Vulners AI Score6.1
CVSS 45.1
CVSS 3.16.1
EPSS0.00102
SSVC