CVE-2021-31537

Published: 11/05/2021 Updated: 19/05/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 384

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

SIS SIS-REWE Go prior to 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_go_check.php (version and all other parameters).

Vulnerable Product	Search on Vulmon	Subscribe to Product
sisinformatik sis-rewe go 7.7
sisinformatik sis-rewe go

SIS-REWE GO version 750/12C suffers from multiple cross site scripting vulnerabilities ...

SEC Consult Vulnerability Lab Security Advisory < 20210511-0 > ======================================================================= title: Reflected Cross-site Scripting Vulnerabilities product: SIS Informatik - REWE GO vulnerable version: 750/12C fixed version: 77 SP17 CVE number: CVE-2021-3153 ...

CWE-79 https://sec-consult.com/vulnerability-lab/advisory/reflected-xss-sis-infromatik-rewe-go-cve-2021-31537/http://seclists.org/fulldisclosure/2021/May/20 https://sisinformatik.com/rewe-go/https://nvd.nist.gov http://seclists.org/fulldisclosure/2021/May/20

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-31537

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect