Flexmonster Pivot Table & Charts 2.7.17 – ‘Remote Report’ Reflected XSS

• Exploit Database
• 124 阅读

• 作者： Marco Nappi
  日期： 2020-12-21
• 类别：

  • webapps
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/49302/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

  # Exploit Title: Flexmonster Pivot Table & Charts 2.7.17 - &apos;Remote Report&apos; Reflected XSS # Date: 08/01/2020 # Exploit Author: Marco Nappi # Vendor Homepage: https://www.flexmonster.com/ # Version:Flexmonster Pivot Table & Charts 2.7.17 # Tested on:Flexmonster Pivot Table & Charts 2.7.17 # CVE : CVE-2020-20140   Cross Site Scripting (XSS) vulnerability in Remote Report component under the Open menu in Flexmonster Pivot Table & Charts 2.7.17   Reflected XSS: The Reflected XSS is a result of insufficient input sanitization of the &apos;path&apos; parameter when fetching the file specifications (file_specs.php). Below I have provided an example URL. When using this URL the user navigates to an non-existing file (the XSS payload). This results in the execution of the payload.   payload: <svg onload=alert("OpenRemoteReport")><!--