Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

XSS In Exponent 2.3.1

#1235

Cross Site Scripting In 2.3.1

POC Video - http://youtu.be/deBudfiZmYY

URL - http://127.0.0.1/exponent/file/picker/ajax_action/1/update/noupdate...

Payload - ">

Severity - High

Exploitation- Remotely

POC Is Attached With This Ticket

Reported by Narendra Bhati · November 16th, 2014 @ 11:22 AM

State: new
Milestone: User issues
Assigned to: expNinja expNinja

Activity

  1. Narendra Bhati
    Narendra Bhati
    • Tag set to security

    November 16th, 2014 @ 12:02 PM

  2. Narendra Bhati
    Narendra Bhati

    Any Update ?

    November 17th, 2014 @ 06:09 AM

  3. Narendra Bhati
    Narendra Bhati
    • Assigned user set to expNinja

    So what your are going to do next ? about this issue !

    December 20th, 2014 @ 02:03 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.