Lucene search
Nam-no508D1D21-C45D-47FF-833F-50C671882E51HistoryAug 19, 2023 - 10:50 p.m.
Cross-site Scripting (XSS) - Stored
2023-08-1922:50:22
nam-no
www.huntr.dev
10
cross-site scripting
stored
remote backup
configuration
vulnerability
0.0004 Low
EPSS
Percentile
14.2%
Description
1. Go to Setting Server ==> Choose Configuare.
2. Continue to choose backup ==> Remote Backup.
3. Inject the payload into the fields host,port,username...
Proof of Concept
link ProC : https://drive.google.com/file/d/1DcCMP9lT93HYNO3RzGllCV_u3Mgk7yfK/view?usp=sharing
Payload
payload = "><img src>Related
prion
prion
Cross site scripting
2023-10-13 13:15:00
osv
osv
CVE-2023-4517
2023-10-13 13:15:12
nvd
nvd
CVE-2023-4517
2023-10-13 13:15:12
cve
cve
CVE-2023-4517
2023-10-13 13:15:12
cvelist
cvelist
CVE-2023-4517 Cross-site Scripting (XSS) - Stored in hestiacp/hestiacp
2023-10-13 12:24:14