CVE-2024-9276 — TMsoft MyAuth Gateway index.php cross site scripting

CVE-2024-9276

TMsoft MyAuth Gateway index.php cross site scripting PUBLISHED

Description (CNA)

A vulnerability classified as problematic has been found in TMsoft MyAuth Gateway 3. Affected is an unknown function of the file /index.php. The manipulation of the argument console/nocache/cmd leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected (CNA)

Vendor / product	Versions
TMsoft / MyAuth Gateway	affected 3

CWE

CWE-79

References

https://vuldb.com/?id.278658
https://vuldb.com/?ctiid.278658
https://vuldb.com/?submit.409126

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.