CVE-2019-7748

_includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2019-02-11

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Dbninja (Dbninja)

References

• https://github.com/eddietcc/CVEnotes/blob/master/DBNinja/Reflect_XSS/readme.md