CVE-2024-26521

CE-Phoenix-v1.0.8.20 Html Injection vulnearbility

Login Page

As we can see there is a login page that anyone can understand there is a HTML injection vulnerability are there in this application.

Basically in this application all php save in this location as you can see the image given below!

HTML Injection codes

PoC - Proof of concept image

Payloads

payloads.txt

PoC Video

poc.1.mp4