💣Exploit CVE-2024-5405 - A vulnerability had been discovered in WinNMP 19.0

[Maksim]

CVE ID : CVE-2024-5405
Published : May 27, 2024, 12:15 p.m. | 51 minutes ago
Description : A vulnerability had been discovered in WinNMP 19.02 consisting of an XSS attack via /tools/redis.php page in the k, hash, key and p parameters. This vulnerability could allow a remote user to submit a specially crafted JavaScript payload for an authenticated user to retrieve their session details.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.