CVE-2022-25323

Suggested description

ZEROF Web Server allows /admin.back XSS.

Vulnerability Type

Cross Site Scripting (XSS)

Vendor of Product

ZEROF

Affected Product Code Base

Web Server

Affected Component

/admin.back

Attack Type

Remote

Impact Code execution

true

Attack Vectors

Remote https:/zerof/admin.back<img src=a onerror=alert(1)>

Discoverer

Igor Landyrev, AWILLIX LLC

Reference

https://awillix.ru