6.1
CVSSv3

CVE-2019-9838

Published: 03/06/2019 Updated: 04/06/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

VFront 0.99.5 has stored XSS via the admin/sync_reg_tab.php azzera parameter, which is mishandled during admin/error_log.php rendering.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

vfront vfront 0.99.5

Exploits

VFront version 0995 suffers from a persistent cross site scripting vulnerability ...

Mailing Lists

Hello, We are informing you about the vulnerabilities we reported in VFront 0995 Here are the details: Advisory by Netsparker Name: Multiple Reflected Cross-site Scripting in VFront 0995 Affected Software: VFront Affected Versions: 0995 Homepage: wwwvfrontorg/ Vulnerability: Reflected Cross-site Scripting Severity: High Status: F ...