ZCBS / ZBBS / ZPBS 4.14k Cross Site Scripting

Exploit Title: ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting XSS Date: 2023-03-30 CVE: CVE-2023-26692 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.zcbs.nl Version: 4.14k Tested on: LAMP, Ubuntu Google Dork: inurl:objecten.pl?ident=3D --- Vulnerability : $GET'ident'...

ZCBS / ZBBS / ZPBS v4.14k - Reflected Cross-Site Scripting Vulnerability

Exploit Title: ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting XSS CVE: CVE-2023-26692 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.zcbs.nl Version: 4.14k Tested on: LAMP, Ubuntu Google Dork: inurl:objecten.pl?ident=3D --- Vulnerability : $GET'ident' Exploitation :...

ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting (XSS)

Exploit Title: ZCBS/ZBBS/ZPBS v4.14k - Reflected Cross-Site Scripting XSS Date: 2023-03-30 CVE: CVE-2023-26692 Exploit Author: Abdulaziz Saad @b4zb0z Vendor Homepage: https://www.zcbs.nl Version: 4.14k Tested on: LAMP, Ubuntu Google Dork: inurl:objecten.pl?ident=3D --- Vulnerability : $GET'ident'...

CVE-2023-26692

ZCBS Zijper Collectie Beheer Systeem ZCBS, Zijper Publication Management System ZPBS, and Zijper Image Bank Management System ZBBS 4.14k is vulnerable to Cross Site Scripting XSS...

Exploit for Cross-site Scripting in Zcbs Zijper_Publication_Management_System

CVE-2023-26692 ZCBS/ZCBS/ZPBS/ZBBS Reflected XSS Explo...

CVE-2023-26692

ZCBS Zijper Collectie Beheer Systeem ZCBS, Zijper Publication Management System ZPBS, and Zijper Image Bank Management System ZBBS 4.14k is vulnerable to Cross Site Scripting XSS...

CVE-2023-26692

ZCBS Zijper Collectie Beheer Systeem ZCBS, Zijper Publication Management System ZPBS, and Zijper Image Bank Management System ZBBS 4.14k is vulnerable to Cross Site Scripting XSS...

CVE-2023-26692

CVE-2023-26692 affects ZCBS/ZPBS/ZBBS 4.14k (Zijper Collectie Beheer Systeem, Publication Management System, Image Bank Management System). The vulnerability is a Reflected XSS caused by input handling in the CGI endpoint objecten.pl, where the parameter $_GET['ident'] is reflected, enabling scri...