Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting

Exploit Database
108 阅读

作者： Dr. Marian Ventuneac

日期： 2011-05-10
类别：
- remote
平台：
- multiple
来源：https://www.exploit-db.com/exploits/35735/

source: https://www.securityfocus.com/bid/47784/info

Apache Struts is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Successful exploitation requires 'Dynamic Method Invocation' to be enabled by default.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Apache Struts versions 2.0.0 through 2.2.1.1 are vulnerable.

http://www.example.com/struts2-blank/home.action!login:cantLogin<script>alert(document.cookie)</script>=some_value

last Exploits
Apache Struts 2.0.0 < 2.2.1.1 - XWork 's:submit' HTML Tag Cross-Site Scripting的更多信息

Mongoose 2.8 – Space String Remote File Disclosure：
Veritas Backup Exec Windows – Remote Agent Overflow (Metasploit)：
RhinoSoft Serv-U FTPd Server – MDTM Overflow (Metasploit)：
ReyeeOS 1.204.1614 – MITM Remote Code Execution (RCE)：
Werkzeug – ‘Debug Shell’ Command Execution：
HP Smart Storage Administrator 2.30.6.0 – Remote Command Injection (Metasploit)：
Dell SonicWALL Scrutinizer – Multiple HTML Injection Vulnerabilities：
iOS Share 1.0 – Directory Traversal：