LISTSERV 17 Cross Site Scripting

🗓️ 17 Jan 2023 00:00:00Reported by Shaunt DType

packetstorm🔗 packetstormsecurity.com👁 219 Views

LISTSERV 17 Reflected XSS Vulnerabilit

Reporter	Title	Published	Views	Family All 14
0day.today	LISTSERV 17 Cross Site Scripting Vulnerability	18 Jan 202300:00	–	zdt
0day.today	LISTSERV 17 - Reflected Cross Site Scripting Vulnerability	30 Mar 202300:00	–	zdt
Circl	CVE-2022-39195	2 Sep 202314:41	–	circl
CNNVD	L-Soft LISTSERV 跨站脚本漏洞	17 Jan 202300:00	–	cnnvd
CVE	CVE-2022-39195	17 Jan 202300:00	–	cve
Cvelist	CVE-2022-39195	17 Jan 202300:00	–	cvelist
Exploit DB	LISTSERV 17 - Reflected Cross Site Scripting (XSS)	30 Mar 202300:00	–	exploitdb
Nuclei	LISTSERV 17 - Cross-Site Scripting	6 Jun 202603:01	–	nuclei
NVD	CVE-2022-39195	17 Jan 202321:15	–	nvd
OSV	CVE-2022-39195	17 Jan 202321:15	–	osv

`# Exploit Title: LISTSERV 17 - Reflected Cross Site Scripting (XSS)  
# Exploit Author: Shaunt D  
# Vendor Homepage: https://www.lsoft.com/  
# Version: 17  
# Tested on: Windows Server 2019  
# CVE : CVE-2022-39195  
  
A reflected cross-site scripting (XSS) vulnerability in the LISTSERV 17 web interface allows remote attackers to inject arbitrary JavaScript or HTML via the "c" parameter.  
  
To reproduce, please visit  
  
http://localhost/scripts/wa.exe?TICKET=test&c=%3Cscript%3Ealert(1)%3C/script%3E  
(or whichever URL you can use for testing instead of localhost).  
  
The "c" parameter will reflect any value given onto the page.  
  
# Solution  
  
This vulnerability can be mitigated by going under "Server Administration" to "Web Templates" and editing the BODY-LCMD-MESSAGE web template. Change &+CMD; to &+HTMLENCODE(&+CMD;); .  
`

17 Jan 2023 00:00Current

EPSS0.09973