Design/Logic Flaw

2018-10-1704:29:00

PRIOn knowledge base

www.prio-n.com

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.0%

An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category[catname] parameter to the admin.php URI.

CPENameOperatorVersion
destoon_b2beq7.0

CPE	Name	Operator	Version
	destoon_b2b	eq	7.0

References

github.com/AvaterXXX/DESTOON/blob/master/XSS.md

www.patec.cn/newsshow.php?cid=24&id=134