Lucene search
MitreCVELIST:CVE-2019-19738HistoryDec 30, 2019 - 5:00 p.m.
CVE-2019-19738
2019-12-3017:00:40
mitre
www.cve.org
5
EPSS
0.001
Percentile
40.7%
log_file_viewer.php in MFScripts YetiShare 3.5.2 through 4.5.3 does not sanitize or encode the output from the lFile parameter on the page, which would allow an attacker to input HTML or execute scripts on the site, aka XSS.
Related
cve
cve
CVE-2019-19738
2019-12-30 17:15:20
prion
prion
Design/Logic Flaw
2019-12-30 17:15:00
nvd
nvd
CVE-2019-19738
2019-12-30 17:15:20
githubexploit
githubexploit
Exploit for Cross-site Scripting in Mfscripts Yetishare
2019-12-17 22:02:40