Published: 14/07/2022 Updated: 18/10/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Portal do Software Publico Brasileiro i3geo v7.0.5 exists to contain a cross-site scripting (XSS) vulnerability via access_token.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
softwarepublico i3geo 7.0.5

Este repositório é destinado a publicação de POC encontradas.

ProofOfConcept Este repositório é destinado a publicação de POC encontradas #POCs CVE-2022-32409 - i3geo - LFI (Local File Inclusion) - codemirrorphp CVE-2022-34092 - i3geo - XSS (Cross Site Scripting) or HTML Injection - svg2imgphp CVE-2022-34093 - i3geo - XSS (Cross Site Scripting) or HTML Injection - access_tokenphp CVE-2022

CWE-79 https://github.com/saladesituacao/i3geo/issues/4 https://github.com/edmarmoretti/i3geo/issues/4 https://owasp.org/www-community/attacks/xss/https://github.com/wagnerdracha/ProofOfConcept/blob/main/i3geo_proof_of_concept.txt#L44 https://softwarepublico.gov.br/social/i3geo https://nvd.nist.gov https://github.com/wagnerdracha/ProofOfConcept

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-34093

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect