| शीर्षक | ControlID XSS Stored |
|---|
| विवरण | Stored XSS (Cross-Site Scripting) vulnerability was found in some ControlID models, this vulnerability allows remote authenticated privileged users to store XSS payloads via web interface.
Accessing the ControlID panel with the default credential, you can register a new user in the application.
Because the past value is placed directly in the body of the page, to perform the test, javascript code was passed as the user's name.
Because the application does not perform any filter on the past content, the code was inserted into the application and executed.
https://www.notion.so/ControlID-XSS-7ab891644a794103b582a59360f071a5 |
|---|
| स्रोत | ⚠️ https://www.controlid.com.br/ |
|---|
| उपयोगकर्ता | Leonardo Teodoro (UID 38554) |
|---|
| सबमिशन | 09/01/2023 02:51 PM (4 साल पहले) |
|---|
| संयम | 09/01/2023 09:51 PM (7 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 217717 [Control iD Gerencia Web 1.30 Web Interface Nome क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 15 |
|---|