SaLICru -SLC-20-cube3(5) – HTML Injection

• Exploit Database
• 119 阅读

• 作者： Ramikan
  日期： 2019-04-08
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/46667/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34

  # Exploit Title: Reflected HTML Injection # Google Dork: None # Date: 16/12/2015 # Exploit Author: Ramikan # Vendor Homepage:https://www.salicru.com/en/ # Software Link: N/A # Version: Tested on SaLICru -SLC-20-cube3(5). # Firmware: cs121-SNMP v4.54.82.130611 # CVE : CVE-2019-10887 # Category:Web Apps     Vulnerability: Reflected HTML Injection Vendor Web site: Version tested:cs121-SNMP v4.54.82.130611 Solution: N/A Note:Default credential:admin/admin or admin/cs121-snmp Victim need to be authenticated in order to get affected by this.     Vulnerability 1:Refelected HTML Injection   Affected URL:   /DataLog.csv?log= /AlarmLog.csv?log= /waitlog.cgi?name= /chart.shtml?data= /createlog.cgi?name=   Affected Parameter: log, name, data   Payload: <h1>HTML Injection</h1>