id: CVE-2020-19515 info: name: qdPM 9.1 - Cross-site Scripting author: theamanrawat severity: medium description: | qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php. impact: | Successful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement. remediation: | To mitigate this vulnerability, it is recommended to apply the latest security patches or updates provided by the vendor. reference: - https://topsecalphalab.github.io/CVE/qdPM9.1-Installer-Cross-Site-Scripting - http://qdpm.net/download-qdpm-free-project-management - https://nvd.nist.gov/vuln/detail/CVE-2020-19515 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N cvss-score: 6.1 cve-id: CVE-2020-19515 cwe-id: CWE-79 epss-score: 0.00102 epss-percentile: 0.4118 cpe: cpe:2.3:a:qdpm:qdpm:9.1:*:*:*:*:*:*:* metadata: verified: true max-request: 1 vendor: qdpm product: qdpm shodan-query: http.favicon.hash:762074255 tags: cve,cve2020,xss,qdpm,unauth http: - method: GET path: - "{{BaseURL}}/install/index.php?step=database_config&db_error=" matchers-condition: and matchers: - type: word part: body words: - '' - 'qdPM' condition: and - type: word part: header words: - 'text/html' - type: status status: - 200 # digest: 4a0a0047304502200cd1f6e4caf617caaece8d6f9aa19270a88d56c12d0123b1be91e6343677a9b20221009deef0490665b459e10f289717d303e9112b168b6cfacedc63e125bebf1237a3:922c64590222798bb761d5b6d8e72950