CNNVD-202601-1376 Information

CNNVD ID

CNNVD-202601-1376

CVE-2019-25270

  • CNNVD Published: 2026-01-08

Description (Chinese)

SOCA Access Control System是中国日懋(SOCA)公司的一个门禁系统。 SOCA Access Control System 180612版本存在跨站脚本漏洞,该漏洞源于对logged_page.php文件中senddata参数清理不当,可能导致跨站脚本攻击。

Description (English)

SOCA Access Control Systems is a closed system of SOCA. The SOCA Access Control System 180612 version has a cross-site script loophole, which stems from the inappropriate clean-up of senddata parameters in the logged page.php file, which may lead to a cross-script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

日懋

Published

2026-01-08

Last Modified

2026-02-24

References

https://cxsecurity.com/issue/WLB-2019050151 https://exchange.xforce.ibmcloud.com/vulnerabilities/160976 https://packetstormsecurity.com/files/152837 https://www.socatech.com/ https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5518.php

Share on: