CVE-2019-7748

MEDIUM

DbNinja 3.2.7 - XSS

Title source: llm
STIX 2.1

Description

_includes\online.php in DbNinja 3.2.7 allows XSS via the data.php task parameter if _users/admin/tasks.php exists.

References (1)

Core 1

Scores

CVSS v3 6.1
EPSS 0.0024
EPSS Percentile 47.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
dbninja/dbninja 3.2.7
Published Feb 11, 2019
Tracked Since Feb 18, 2026