4.3
CVSSv2

CVE-2015-6945

Published: 15/09/2015 Updated: 09/10/2018
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in JSP/MySQL Administrador Web 1 allows remote malicious users to inject arbitrary web script or HTML via the bd parameter to sys/sys/listaBD2.jsp.

Vulnerable Product Search on Vulmon Subscribe to Product

jsp\\/mysql administrador web project jsp\\/mysql administrador web 1.0

Exploits

[+] Credits: hyp3rlinx [+] Website: hyp3rlinxaltervistaorg [+] Source: hyp3rlinxaltervistaorg/advisories/AS-JSPMYSQLADMINISTRADOR-0904txt Vendor: ================================ JSPMySQL Administrador sitesgooglecom/site/mfpledon/producao-de-software Product: ================================ JSPMySQL Administrador v1 ...