CVE-2020-36638

Low

Description

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Chris92de AdminServ. It has been rated as problematic. This issue affects some unknown processing of the file resources/core/adminserv.php. The manipulation of the argument error leads to cross site scripting. The attack may be initiated remotely. The patch is named 9a45087814295de6fb3a3fe38f96293665234da1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217043. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

SeverityLow

CVSS3.5

Exploit probability—

ProductAdminserv

PublishedDec 30, 2022

First seenDec 30, 2022

Weakness typeCWE-79Cross-site scripting (XSS)

How to fix

Update

adminserv_project adminserv2020-09-29 or later

Patches

github.com/Chris92de/AdminServ/commit/9a45087814295de6fb3a3fe38f96293665234da1

Affected products

Product	Affected versions	Fixed in
adminserv_project adminserv	v < 2020-09-29	2020-09-29

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.