CVE-2017-15380

XSS exists in the E-Sic 1.0 /cadastro/index.php URI (aka the requester's registration area) via the nome parameter.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-10-23

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• E-sic (Softwarepublico)

References

• http://whiteboyz.xyz/esic-software-publico-xss.html
• https://www.exploit-db.com/exploits/42983/