Acumatica customization publish webshell RCE

Customizer-role user imports a ZIP via CustomizationApi/import, publishBegin/End, writes Pages/.aspx to IIS webroot; invoke with ?c= set payload for cmd.exe. """Acumatica authenticated customization import/publish → ASPX webshell RCE.""" from future import annotations import base64 import io impo...

Acumatica Customization Publish Webshell RCE — Detect

Fingerprint / reachability check for Acumatica Customization Publish Webshell RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Acumatica Customization Publish Webshell RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

acumatica.com Cross Site Scripting vulnerability OBB-2625336

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

acumatica.com Cross Site Scripting vulnerability OBB-2386710

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

acumatica.com XSS vulnerability

Open Bug Bounty ID: OBB-456833 Description| Value ---|--- Affected Website:| acumatica.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

acumatica.com XSS vulnerability

Vulnerable URL: http://www.acumatica.com/blog/?s=+%22%3E%3Csvg%2Fonload%3Dalert%2FOPENBUGBOUNTY%2F%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 171404 VIP website status:| No...