Boonex Dolphin 7.4.2 – ‘width’ Stored XSS

• Exploit Database
• 133 阅读

• 作者： Piyush Patil
  日期： 2021-03-19
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/49670/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

  # Exploit Title: Boonex Dolphin 7.4.2 - &apos;width&apos; Stored XSS # Date: 18-03-2021 # Exploit Author: Piyush Patil # Vendor Homepage: https://www.boonex.com/ # Software Link: https://www.boonex.com/downloads # Version: 7.4.2 # Tested on: Windows 10   # Reference - https://github.com/xoffense/POC/blob/main/Boonex%20Dolphin%20CMS%207.4.2%20%20stored%20XSS   Steps to Reproduce Bug: 1- Login to Admin Panel 2- Goto "Builders" => "Pages Builder" 3- Select any page 4- Turn on Burp Suite Intercept and Change "other pages width" to "1081px</script><script>alert(document.cookie)</script>"