发布 2014-11-10 漏洞条目

Serenity Client Management Portal 1.0.1 – Multiple Vulnerabilities

Exploit Source

# Exploit Title: Serenity Client Management Portal Multiple Vulnerabilities

# Date: 08-10-2014

# Exploit Author: Halil Dalabasmaz

# Version: v1.0.1

# Software Link: http://codecanyon.net/item/serenity-client-management-portal/9136098

# Software Test Link: http://www.zenperfectdesign.com/demo/serenity-cc/

# Vulnerabilities Description:

===Unrestricted File Upload===

Solution

Filter the files aganist to attacks.

===

===Stored XSS===

Sample Payload for XSS: "><script>alert(document.cookie);</script>

Solution

Filter the files aganist to attacks.

相关漏洞条目