SQLiteManager.Main.PHP.XSS
Description
This indicates an attack attempt to exploit a Cross Site Scripting vulnerability in SQLiteManager.
The vulnerability is caused by insufficient sanitizing of the "dbsel" parameter that is being passed to "main.php". It may allow remote attackers to execute arbitrary script code withing the context of the application by sending a crafted http request to the vulnerable application.
Affected Products
SQLiteManager SQLiteManager 1.2.4
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.
Recommended Actions
Currently we are not aware of any vendor supplied patch for this issue.
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |