CVE-2020-36637

Low

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Chris92de AdminServ. It has been declared as problematic. This vulnerability affects unknown code of the file resources/core/adminserv.php. The manipulation of the argument text leads to cross site scripting. The attack can be initiated remotely. The patch is identified as 3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7. It is recommended to apply a patch to fix this issue. VDB-217042 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

SeverityLow

CVSS3.5

Exploit probability—

ProductAdminserv

PublishedDec 30, 2022

First seenDec 30, 2022

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update

adminserv_project adminserv2020-10-04 or later

Patches

github.com/Chris92de/AdminServ/commit/3ed17dab3b4d6e8bf1c82ddfbf882314365e9cd7

Affected products

Product	Affected versions	Fixed in
adminserv_project adminserv	v < 2020-10-04	2020-10-04

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.