Lucene search
K

SeedDMS < 5.1.11 - 'out.GroupMgr.php' Cross-Site Scripting

🗓️ 24 Jun 2019 00:00:00Reported by Nimit JainType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 206 Views

Vulnerability in SeedDMS < 5.1.11 'out.GroupMgr.php' allows Persistent Cross-Site Scriptin

Related
Code
ReporterTitlePublishedViews
Family
0day.today
SeedDMS < 5.1.11 - (out.GroupMgr.php) Cross-Site Scripting Vulnerability
26 Jun 201900:00
zdt
CNVD
SeedDMS Cross-Site Scripting Vulnerability (CNVD-2019-18509)
18 Jun 201900:00
cnvd
CVE
CVE-2019-12801
17 Jun 201917:35
cve
Cvelist
CVE-2019-12801
17 Jun 201917:35
cvelist
EUVD
EUVD-2019-4383
7 Oct 202500:30
euvd
exploitpack
SeedDMS 5.1.11 - out.GroupMgr.php Cross-Site Scripting
24 Jun 201900:00
exploitpack
NVD
CVE-2019-12801
17 Jun 201918:15
nvd
OSV
CVE-2019-12801
17 Jun 201918:15
osv
Packet Storm
SeedDMS out.GroupMgr.php Cross Site Scripting
24 Jun 201900:00
packetstorm
Prion
Cross site scripting
17 Jun 201918:15
prion
Rows per page
# Exploit Title: [Persistent Cross-Site Scripting or Stored XSS in out/out.GroupMgr.php in SeedDMS before 5.1.11]
# Google Dork: [NA]
# Date: [17-June-2019]
# Exploit Author: [Nimit Jain](https://www.linkedin.com/in/nimitiitk)(https://secfolks.blogspot.com)
# Vendor Homepage: [https://www.seeddms.org]
# Software Link: [https://sourceforge.net/projects/seeddms/files/]
# Version: [< 5.1.11] (REQUIRED)
# Tested on: [NA]
# CVE : [CVE-2019-12801]

Proof-of-Concept:

Step 1: Login to the application and go to Groups Management in Admin tools.
Step 2: Now create a new group as hello<script>alert("group")</script>
Step 3: Now save it click on choose group to execute the javascript inserted above.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 Jun 2019 00:00Current
6.5Medium risk
Vulners AI Score6.5
CVSS 24.3
CVSS 36.1
EPSS0.00426
206