CVE-2019-16344: XSS
A cross-site scripting (XSS) vulnerability in the login form (/ScadaBR/login.htm) in ScadaBR 1.0CE allows a remote attacker to inject arbitrary web script or HTML via the username or password parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-16344?
CVE-2019-16344 has a medium severity rating due to its potential for exploitation via cross-site scripting.
How do I fix CVE-2019-16344?
To mitigate CVE-2019-16344, ensure that input validation and encoding are properly implemented for the username and password fields in the login form.
Which versions of ScadaBR are affected by CVE-2019-16344?
CVE-2019-16344 affects ScadaBR version 1.0CE.
What potential impacts can result from exploiting CVE-2019-16344?
Exploiting CVE-2019-16344 can allow attackers to perform a variety of actions such as stealing session cookies or redirecting users to malicious websites.
Is CVE-2019-16344 a client-side or server-side vulnerability?
CVE-2019-16344 is a client-side vulnerability, as it allows attackers to execute scripts in the victims' browsers.