Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
355
VMScore

CVE-2019-11504

Published: 24/04/2019 Updated: 06/05/2019
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7
VMScore: 355
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N
Subscribe to Zotonic

Vulnerability Summary

Zotonic before version 0.47 has mod_admin XSS.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

zotonic zotonic

Exploits

Exploit DB: Zotonic < 0.47.0 mod_admin - Cross-Site Scripting
# Exploit Title: Zotonic &lt;=046 mod_admin (Erlang) - Reflective Cross-Site Scripting # Date: 24-04-2019 # Exploit Author: Ramòn Janssen # Researchers: Jan-martin Sijs, Joost Quist, Joost Vondeling, Ramòn Janssen # Vendor Homepage: zotoniccom/ # Software Link: githubcom/zotonic/zotonic/releases/tag/0460 # Version: &lt;=046 # ...
Exploit DB: Zotonic 0.46 mod_admin Cross Site Scripting
Zotonic versions 046 and below suffer from a mod_admin (Erlang) cross site scripting vulnerability ...

References

CWE-79http://docs.zotonic.com/en/latest/developer-guide/releasenotes/rel_0.47.0.htmlhttps://www.exploit-db.com/exploits/46788/http://packetstormsecurity.com/files/152717/Zotonic-0.46-mod_admin-Cross-Site-Scripting.htmlhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/46788
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675CVE-2024-3400CVE-2024-23557mass assignmentCVE-2023-1389local file inclusionCVE-2024-32596file uploadCVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook