Cross site scripting

2023-11-0808:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

timetec awdms

new zone function

crafted payload

sensitive information exposure

nvd

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

JSON

Cross Site Scripting vulnerability in timetec AWDMS v.2.0 allows an attacker to obtain sensitive information via a crafted payload to the remark parameter of the New Zone function.

CPENameOperatorVersion
auto_web-based_database_management_systemeq2.0

CPE	Name	Operator	Version
	auto_web-based_database_management_system	eq	2.0

References

github.com/fengniange/TimeTec_Cloud_AWDMS/