Отправить #311886: https://owladmin.com/site Owl Admin System v3.5.7 Cross-Site ScriptingИнформация

Названиеhttps://owladmin.com/site Owl Admin System v3.5.7 Cross-Site Scripting
ОписаниеOwl Admin System /admin-api/upload_image File Upload Lead to Stored XSS Vulnerability.Attacker can bypass file upload restrictions and cause files with malicious code to be uploaded.
Источник⚠️ https://github.com/fubxx/CVE/blob/main/OwlAdmin-XSS.md
Пользователь
 LIYU (UID 67244)
Представление07.04.2024 11:38 (3 лет назад)
Модерация14.04.2024 10:49 (7 days later)
Статуспринято
Запись VulDB260606 [slowlyo OwlAdmin до 3.5.7 Image File Upload /admin-api/upload_image file межсайтовый скриптинг]
Баллы16

Interested in the pricing of exploits?

See the underground prices here!