AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.
References
| Link | Resource |
|---|---|
| https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html | Third Party Advisory |
| https://www.twcert.org.tw/tw/cp-132-7930-e0368-1.html | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Jul 2024, 18:07
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:space_management_system_project:space_management_system:*:*:*:*:*:*:*:* | |
| References | () https://www.twcert.org.tw/en/cp-139-7931-608eb-2.html - Third Party Advisory | |
| References | () https://www.twcert.org.tw/tw/cp-132-7930-e0368-1.html - Third Party Advisory | |
| First Time |
Space Management System Project space Management System
Space Management System Project |
15 Jul 2024, 13:00
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 Jul 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-07-15 06:15
Updated : 2024-07-16 18:07
NVD link : CVE-2024-6742
Mitre link : CVE-2024-6742
CVE.ORG link : CVE-2024-6742
JSON object : View
Products Affected
space_management_system_project
- space_management_system
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')