CVE-2019-7748

MEDIUM

DbNinja 3.2.7 - Cross-Site Scripting via Task Parameter

Title source: llm

_includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

CVSS v3 6.1

EPSS 0.0086

EPSS Percentile 53.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (1)

dbninja/dbninja 3.2.7

Published Feb 11, 2019

Tracked Since Feb 18, 2026