| शीर्षक | Authenticated Reflected XSS in KOHA MARC21 version 23.05.03 |
|---|
| विवरण | There is, a vulnerability of type XSS reflected in koha marc21 the latest version released on August 30, to reproduce the vulnerability what there is is to login, then go to advanced search and with this write our exploit, here below I show the PoC
This is the url of advanced search
To see the PoC video you just have to go to this link The video is private, only the link can be accessed
http://localhost:8001/cgi-bin/koha/catalogue/search.pl
https://www.youtube.com/watch?v=b5107YkpgaM
If you need more information, please let me know
I also just reported another vulnerability in other software that they have, it is similar to the PoC |
|---|
| स्रोत | ⚠️ https://www.youtube.com/watch?v=b5107YkpgaM |
|---|
| उपयोगकर्ता | ph03n1xsp (UID 53845) |
|---|
| सबमिशन | 12/09/2023 11:38 AM (3 साल पहले) |
|---|
| संयम | 16/09/2023 10:20 AM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 239866 [KOHA तक 23.05.03 MARC search.pl क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 17 |
|---|