CVE-2019-12935 PoC — Shopware 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-12935.yaml

Associated Vulnerability

Title: Shopware 跨站脚本漏洞 (CVE-2019-12935)
Description:Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI.

Description

Shopware before 5.5.8 contains a reflected cross-site scripting (XSS) caused by unsanitized query string parameters in the backend/Login or backend/Login/load/ URI, letting attackers execute arbitrary scripts in the context of the victim's browser, exploit requires sending crafted URL to the victim.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →