CVE-2019-13066

Sahi Pro 8.0.0 contains a reflected XSS vulnerability in the script manager arena at /s /dyn/pro/DBReports. The issue is triggered by manipulating the sql parameter (and relevant fields such as Script Name, Suite Name, Base URL, Android, iOS, Scripts Run, Origin Machine, or Comment), allowing an ...

Sahi Pro 8.x Cross Site Scripting

Exploit Title: Sahi pro 8.x Reflected XSS Date: 17-06-2019 Exploit Author: x00pwn Vendor Homepage:https://sahipro.com/ Software Link:https://sahipro.com/downloads-archive/ Version: 8.0 Tested on: Linux Ubuntu / Windows 7 CVE : CVE-2019-13066 POC - The Sahi pro web-application has a script manager...