XSS In Exponent 2.3.1 Manage Page
Reported by Narendra Bhati | November 16th, 2014 @ 11:45 AM | in User issues
Cross Site Scripting In 2.3.1
URL - http://127.0.0.1/exponent/navigation/add_section/parent/0%22%3E%3Cs...
%281%29%3C/script%3E
Payload - ">
Severity - High
Exploitation- Remotely
POC Is attached with this ticket
-
XSS-2_-2.PNG
68 KB
XSS-2_-2.PNG
Comments and changes to this ticket
-
Narendra Bhati November 16th, 2014 @ 11:46 AM
forget to attached text file
kindly look into the attachment for text poc
-
Narendra Bhati November 16th, 2014 @ 12:02 PM
- Tag set to “security”
-
-
Narendra Bhati December 20th, 2014 @ 02:03 PM
- Assigned user set to “expNinja”
So what your are going to do next ? about this issue
Please Sign in or create a free account to add a new ticket.
With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.
Create new ticket
Create your profile
Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป
Bug Tracker for Exponent CMS
People watching this ticket
expNinja
Narendra Bhati
Attachments
-
XSS-2_-2.PNG
68 KB