Description
A vulnerability classified as problematic was found in Realce Tecnologia Queue Ticket Kiosk up to 20250517. Affected by this vulnerability is an unknown functionality of the file /adm/index.php of the component Cadastro de Administrador Page. The manipulation of the argument Name/Usuário leads to cross site scripting. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Realce Tecnologia | Queue Ticket Kiosk | 20250517 | — |
References
- VDB-310267 | Realce Tecnologia Queue Ticket Kiosk Cadastro de Administrador Page index.php cross site scripting vdb-entry technical-description
- VDB-310267 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #579852 | Realce Tecnologia Queue ticket kiosk web application N/A Stored Cross Site Scripting third-party-advisory