WebMO Job Manager v20.0 Reflected XSS Vulnerability in jobmgr.cgi

Document Title: WebMO Job Manager v20.0 - Cross Site Web Vulnerability Reference Link: https://www.vulnerability-lab.com/get_content.php?id=2270 Release Date: 2021-06-21 Vulnerability Lab ID (VL-ID): 2270 Common Vulnerability Scoring System: 4.1 Vulnerability Category: Cross Site Scripting - Non Persistent Current Estimated Price: 500€ - 1.000€ Product & Service Description: WebMO is a web-based interface for computational chemistry packages, enabling users to set up, run, and visualize chemical computations via web browsers, smartphones, or tablets Summary Advisory Information: The Vulnerability Lab research team discovered a reflected Cross-Site Scripting vulnerability in the WebMO Job Manager v20.0 application Affected Product: WebMO, LLC Product: WebMO Job Manager v20.0 - CGI (Web-Application) Vulnerability Disclosure Timeline: 2021-04-08 to 2021-07-16 Discovery Status: Published Exploitation Technique: Remote Severity: Medium Verification Type: Pre-authentication (no privileges or session required) User Interaction: Low user interaction Disclosure Type: Full Disclosure Technical Details & Description: The vulnerability resides in the and parameters of the file. Attackers can inject malicious script code via GET requests to manipulate client-side application requests, leading to leakage of user session data Affected Module: Search Affected File: jobmgr.cgi Affected Parameters: filterSearch, filterSearchType Proof of Concept: Complete proof of concept and exploitation method provided Security Risk: Medium security risk due to client-side Cross-Site Scripting web vulnerability Acknowledgements & Author: Vulnerability Lab Research Team

Goal Reached Thanks to every supporter — we hit 100%!

WebMO Job Manager v20.0 Reflected XSS Vulnerability in jobmgr.cgi

More from this source