7fa85628bd
19 changes to exploits/shellcodes Hasura GraphQL 1.3.3 - Denial of Service Tenda D151 & D301 - Configuration Download (Unauthenticated) rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) rConfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (1) Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access) Fast PHP Chat 1.3 - 'my_item_search' SQL Injection WordPress Plugin RSS for Yandex Turbo 1.29 - Stored Cross-Site Scripting (XSS) BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting (XSS) Discourse 2.7.0 - Rate Limit Bypass leads to 2FA Bypass RemoteClinic 2 - 'Multiple' Cross-Site Scripting (XSS) rconfig 3.9.6 - Arbitrary File Upload to Remote Code Execution (Authenticated) (2) OpenEMR 5.0.2.1 - Remote Code Execution Adtran Personal Phone Manager 10.8.1 - 'emailAddress' Stored Cross-Site Scripting (XSS) Adtran Personal Phone Manager 10.8.1 - 'Multiple' Reflected Cross-Site Scripting (XSS) Adtran Personal Phone Manager 10.8.1 - DNS Exfiltration GravCMS 1.10.7 - Unauthenticated Arbitrary YAML Write/Update (Metasploit) Hasura GraphQL 1.3.3 - Local File Read Hasura GraphQL 1.3.3 - Service Side Request Forgery (SSRF)
18 lines
No EOL
820 B
Text
18 lines
No EOL
820 B
Text
# Exploit Title: BlackCat CMS 1.3.6 - 'Multiple' Stored Cross-Site Scripting (XSS)
|
|
# Date: 04/07/2021
|
|
# Exploit Author: Ömer Hasan Durmuş
|
|
# Vendor Homepage: https://blackcat-cms.org/
|
|
# Software Link: https://blackcat-cms.org/page/download.php
|
|
# Version: BlackCat CMS - 1.3.6
|
|
|
|
Step 1 : Login to admin account in http://TARGET/backend/start/index.php
|
|
Step 2 : Then click on the "Addons"
|
|
Step 3 : Click on "Create new"
|
|
Step 4 : Input "<script>alert(1)</script>" in the field "Module / language name"
|
|
Step 5 : Update or visit new page.
|
|
|
|
Step 1 : Login to admin account in http://TARGET/backend/start/index.php
|
|
Step 2 : Then click on the "Access"
|
|
Step 3 : Click on "Manage groups"
|
|
Step 4 : Input "<script>alert(1)</script>" in the field "Group name" and click "Add group"
|
|
Step 5 : Update or visit new page. |