Metrics
Affected Vendors & Products
Fri, 27 Sep 2024 16:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Tmsoft
Tmsoft myauthgateway |
|
CPEs | cpe:2.3:a:tmsoft:myauthgateway:*:*:*:*:*:*:*:* | |
Vendors & Products |
Tmsoft
Tmsoft myauthgateway |
|
Metrics |
ssvc
|
Fri, 27 Sep 2024 12:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of the file /index.php. The manipulation of the argument console/nocache/cmd leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way. | A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of the file /index.php. The manipulation of the argument console/nocache/cmd leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
Fri, 27 Sep 2024 10:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of the file /index.php. The manipulation of the argument console/nocache/cmd leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. The vendor was contacted early about this disclosure but did not respond in any way. | |
Title | TMsoft MyAuth Gateway index.php cross site scripting | |
Weaknesses | CWE-79 | |
References |
| |
Metrics |
cvssV2_0
|
Status: PUBLISHED
Assigner: VulDB
Published: 2024-09-27T10:31:05.584Z
Updated: 2024-09-27T15:34:32.926Z
Reserved: 2024-09-27T05:12:43.847Z
Link: CVE-2024-9276
Updated: 2024-09-27T15:34:26.676Z
Status : Awaiting Analysis
Published: 2024-09-27T11:15:13.963
Modified: 2024-09-30T12:45:57.823
Link: CVE-2024-9276
No data.