← back
CVE-2018-12234

CVE-2018-12234

EPSS 2.9%
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML response via the flexiportal/GeneralInfo.aspx strAction parameter.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.htmlunverifiedexploitdbwww.exploit-db.com/exploits/47611unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/155231/Adrenalin-Core-HCM-5.4.0-Cross-Site-Scripting.htmlhttps://www.knowcybersec.com/2018/09/first-cve-2018-12234-reflected-XSS.htmlhttps://www.securethy.com/2018/09/first-cve-2018-12234-reflected-XSS.htmlhttps://www.thecysec.in/2020/04/xxs-adrenalin-generalinfo-cve-id.html