Description
SOCA Access Control System 180612 contains a cross-site scripting vulnerability in the 'senddata' POST parameter of logged_page.php that allows attackers to inject malicious scripts. Attackers can exploit this weakness by sending crafted POST requests to execute arbitrary HTML and script code in a victim's browser session.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SOCA Technology | SOCA Access Control System | 180612, 170000, 141007 | — |
References
- Zero Science Lab Vulnerability Entry third-party-advisory
- Packet Storm Security Exploit Entry exploit
- CXSecurity Vulnerability Listing third-party-advisory
- IBM X-Force Vulnerability Exchange vdb-entry
- SOCA Vendor Homepage product