| शीर्षक | Scada-LTS 2.7.8 (Last) Stored Cross-Site Scripting |
|---|
| विवरण | Hello team,
I found a Stored Cross-Site Scripting (XSS) vulnerability in the latest version of Scada-LTS.
Steps to Reproduce:
Go to "http://IP:8080/Scada-LTS/app.shtm#/alarms/scada".
Select and click on any "Message".
Insert the following payload in the Text Box: "><img src=x onerror=alert(document.location)>.
Click on "ADD COMMENT".
The payload is successfully stored, resulting in a Stored XSS vulnerability.
Video (Don't share please):
https://youtu.be/dk0fFfUl444
|
|---|
| स्रोत | ⚠️ https://github.com/SCADA-LTS/Scada-LTS |
|---|
| उपयोगकर्ता | Stux (UID 40142) |
|---|
| सबमिशन | 07/08/2024 08:46 PM (2 साल पहले) |
|---|
| संयम | 16/08/2024 10:55 PM (9 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 274909 [Scada-LTS 2.7.8 Message Scada क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|