Update CVE-2018-16139.yaml

patch-1
Prince Chaddha 2022-09-12 11:57:41 +05:30 committed by GitHub
parent 9a436a6599
commit c4f264f125
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions

View File

@ -1,11 +1,11 @@
id: CVE-2018-16139
info:
name: XSS on Bibliopac
name: BIBLIOsoft BIBLIOpac 2008 - Cross Site Scripting
author: atomiczsec
severity: medium
description: |
Cross-site scripting (XSS) vulnerability in the library management/inventory software, Bibliopac from Bibliosoft.
Cross-site scripting (XSS) vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to to bin/wxis.exe/bibliopac/.
reference:
- https://www.0x90.zone/web/xss/2019/02/01/XSS-Bibliosoft.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-16139
@ -18,7 +18,7 @@ info:
metadata:
verified: true
shodan-query: title:"Bibliopac"
tags: cve,cve2018,xss
tags: cve,cve2018,xss,bibliopac,bibliosoft
requests:
- method: GET