CVE-2020-6583

MEDIUM

6.1

CVSS Severity Score

EPSS Score0.0860%

EPSS Percentile17.53th

Published2020年1月8日

Last Modified2024年11月21日

Vulnerability Description

BigProf Online Invoicing System (OIS) through 2.6 has XSS that can be leveraged for session hijacking. An attacker can exploit the XSS vulnerability, retrieve the session cookie from the administrator login, and take over the administrator account via the Name field in an Add New Client action.

Affected Platforms (CPE)

📦

Bigprof

Online Invoicing System

<= 2.6

References & Advisories

🔗 https://www.sevenlayers.com/index.php/282-online-invoicing-system-2-6-xss-session-hijack

Vulnerability Description

Affected Platforms (CPE)

Online Invoicing System

References & Advisories

関連する脆弱性情報