CVE-2015-4660

CVE-2015-4660

EPSS 2.4%

Cross-site scripting (XSS) vulnerability in Enhanced SQL Portal 5.0.7961 allows remote attackers to inject arbitrary web script or HTML via the id parameter to iframe.php.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://hyp3rlinx.altervista.org/advisories/AS-ENHSQLPORTAL0602.txt http://packetstormsecurity.com/files/132122/Enhanced-SQL-Portal-5.0.7961-Cross-Site-Scripting.html http://www.securityfocus.com/archive/1/535661/100/0/threaded http://www.securityfocus.com/bid/74946