fc0129fabf
12 changes to exploits/shellcodes Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution Microsoft Windows Server 2012 - 'Group Policy' Security Feature Bypass Microsoft Windows Server 2012 - 'Group Policy' Remote Code Execution (MS15-011) Microsoft Windows Server 2012 - 'Group Policy' Security Feature Bypass (MS15-014) Jenkins 2.235.3 - 'tooltip' Stored Cross-Site Scripting Openfire 4.6.0 - 'groupchatJID' Stored XSS Openfire 4.6.0 - 'users' Stored XSS Openfire 4.6.0 - 'sql' Stored XSS Medical Center Portal Management System 1.0 - Multiple Stored XSS Jenkins 2.235.3 - 'Description' Stored XSS Rukovoditel 2.6.1 - RCE Supply Chain Management System - Auth Bypass SQL Injection Dolibarr 12.0.3 - SQLi to RCE Courier Management System 1.0 - 'First Name' Stored XSS Courier Management System 1.0 - 'MULTIPART street ((custom) ' SQL Injection Courier Management System 1.0 - 'ref_no' SQL Injection
26 lines
No EOL
1.2 KiB
Text
26 lines
No EOL
1.2 KiB
Text
# Exploit Title: Medical Center Portal Management System 1.0 - Multiple Stored XSS
|
|
# Exploit Author: Saeed Bala Ahmed (r0b0tG4nG)
|
|
# Date: 2020-12-10
|
|
# Google Dork: N/A
|
|
# Vendor Homepage: https://www.sourcecodester.com/php/14594/medical-center-portal-management-system.html
|
|
# Software Link: https://www.sourcecodester.com/download-code?nid=14594&title=Medical+Center+Portal+Management+System+using+PHP%2FMySQLi
|
|
# Affected Version: Version 1
|
|
# Category: Web Application
|
|
# Tested on: Parrot OS
|
|
|
|
Step 1: Log in to the application with any valid user credentials.
|
|
|
|
Step 2: Click on "Medical Products", select "Add Medical Products", use
|
|
"<scrip>alert(1)</script>" in both name ad description fields. Complete the
|
|
other fields and save product.
|
|
|
|
Step 3: Once you click on save, this should trigger the XSS payload.
|
|
clicking on the "Medical Products" page anytime will trigger the Stored XSS
|
|
Payload
|
|
|
|
Note: Same method applies to "Add New Hospital | Pharmacy page"
|
|
|
|
Step 1: Use "<scrip>alert("r0b0tG4nG")</script>" as hospital/pharmacy name,
|
|
fill the other required information and click on save. Your payload will be
|
|
executed anytime you click on "Medical Products" page or "Add New Hospital
|
|
| Pharmacy page" page. |