TranzAxis 3.2.41.10.26 – Stored Cross-Site Scripting (XSS) (Authenticated)

• Exploit Database
• 10 阅读

• 作者： ABABANK REDTEAM
  日期： 2025-03-19
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/52086/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20

  Exploit Title: TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated) Date: 10th, March, 2025 Exploit Author: ABABANK REDTEAM Vendor Homepage: https://compassplustechnologies.com/ Version: 3.2.41.10.26 Tested on: Window Server 2016   1. Login to web application 2. Click on `Entire System` goto `Monitoring` then click on `Terminals Monitoring` 3. Select any name below `Terminals Monitoring` then click on `Open Object in Tree` 4. Select on Filter then supply with any filter name then click `Apply Filter` 5. On the right side select on `Save Settings in Explorer Tree`, on the `Enter Explorer Item Title` supply the payload <img src=x onerror=alert(document.domain)> then click OK.   Payload: <img src=x onerror=alert(document.domain)>