In DbNinja 3.2.7, the Add Host function of the Manage Hosts pages has a Stored Cross-site Scripting (XSS) vulnerability in the User Name field.
References
Link | Resource |
---|---|
https://github.com/0xUhaw/CVE-Bins/tree/master/DbNinja | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-02-06 13:29
Updated : 2019-02-08 04:50
NVD link : CVE-2019-7545
Mitre link : CVE-2019-7545
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
dbninja
- dbninja