CVE-2019-25156
- Source
- https://cve.org/CVERecord?id=CVE-2019-25156
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-25156.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-25156
- Published
- 2023-11-07T06:15:07.783Z
- Modified
- 2026-07-08T05:55:30.499487215Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is named 975b56953efabb434519d9feefcc53685fb8d0ab. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-244495.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:dstar2018:agency:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "fixed": "2019-01-15" } ], "vendor_product": "dstar2018:agency", "source": "CPE_RANGE" } ] }- References
Affected packages
Git / github.com/dstar2018/agency-code-repo
Affected versions
db_mod.*
db_mod.1
db_mod.10
db_mod.11
db_mod.12
db_mod.13
db_mod.14
db_mod.15
db_mod.17
db_mod.2
db_mod.20
db_mod.21
db_mod.22
db_mod.23
db_mod.24
db_mod.25
db_mod.26
db_mod.28
db_mod.29
db_mod.3
db_mod.32
db_mod.33
db_mod.34
db_mod.36
db_mod.39
db_mod.4
db_mod.41
db_mod.43
db_mod.44
db_mod.46
db_mod.5
db_mod.51
db_mod.53
db_mod.54
db_mod.55
db_mod.6
db_mod.61
db_mod.7
db_mod.8
db_mod.9
Other
info_additional
multiple_ethnicity
snapshot_2
snapshot_pre1