Beveiligingsadvies

CVE-2024-5413

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-28 12:21:40
Laatst bijgewerkt 2024-08-01 21:11:12
Toegewezen door INCIBE
CVSS-score 7.1
Status PUBLISHED

Beschrijving

A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/scheduled.php, all parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.