| 제목 | JobSeeker 1.5 - Reflected XSS |
|---|
| 설명 | # Exploit Title: JobSeeker 1.5 - Reflected XSS
# Exploit Author: skalvin aka (CraCkEr)
# Date: 15/07/2023
# Vendor: phpscriptpoint
# Vendor Homepage: https://phpscriptpoint.com/
# Software Link: https://demo.phpscriptpoint.com/jobseeker/
# Tested on: Windows 10 Pro
# Impact: Manipulate the content of the site
## Description
The attacker can send to victim a link containing a malicious URL in an email or instant message
can perform a wide variety of actions, such as stealing the victim's session token or login credentials
Path: /jobseeker/search-result.php
GET parameter 'kw' is vulnerable to RXSS
GET parameter 'lc' is vulnerable to RXSS
GET parameter 'ct' is vulnerable to RXSS
GET parameter 'cp' is vulnerable to RXSS
GET parameter 'p' is vulnerable to RXSS
https://website/jobseeker/search-result.php?kw=[XSS]&lc=[XSS]&ct=[XSS]&cp=[XSS]&p=[XSS]
[-] Done |
|---|
| 사용자 | skalvin (UID 49463) |
|---|
| 제출 | 2023. 07. 15. PM 09:54 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 07. 23. PM 03:03 (8 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 235207 [phpscriptpoint JobSeeker 1.5 /search-result.php kw/lc/ct/cp/p 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|