发布 2020-12-02 漏洞条目

PRTG Network Monitor 20.4.63.1412 – ‘maps’ Stored XSS

Exploit Source

# Exploit Title: PRTG Network Monitor 20.4.63.1412 - 'maps' Stored XSS

# Date: 2/12/2020

# Exploit Author: Amin Rawah

# Vendor Homepage: https://www.paessler.com/prtg

# Software Link: https://www.paessler.com/prtg

# Version: 20.4.63.1412 x64

# Tested on: Windows

# CVE : CVE-2020-14073

Description:

Since there is a stored XSS affecting 'maps' in the system, a malicious user can escalte his/her privilege to PRTG Administrator.

Steps:

1- Login to PRTG system and view source code (currentUserId)

2- Create a map, add an element, double click the element and modify the HTML section 'HTML After'

3- In 'HTML After' add the following code:

<form action="http://<PRTG_SERVER>:8081/editsettings" method="POST" enctype="multipart/form-data">

</form>

4- Save and share the link with PRTG Administrator.

5- Login with the highest privilege.

相关漏洞条目