CVE-2018-10821 PoC — BlackCatCMS 跨站脚本漏洞

Source

https://github.com/BalvinderSingh23/Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3

Associated Vulnerability

Title:BlackCatCMS 跨站脚本漏洞 (CVE-2018-10821)
Description:BlackCatCMS是一套同时支持英语和德语的开源内容管理系统（CMS）。 BlackCatCMS 1.3版本中的backend/pages/modify.php文件存在跨站脚本漏洞。远程攻击者可借助搜索面板利用该漏洞注入任意的Web脚本或HTML。

Description

BlackCat-CMS-Bundle-v1.3 Cross Site Scripting(XSS) Assigned CVE Number: CVE-2018-10821

Readme

# Cross-Site-Scripting-Reflected-XSS-Vulnerability-in-blackcatcms_v1.3
BlackCat-CMS-Bundle-v1.3 Cross Site Scripting(XSS) Assigned CVE Number: CVE-2018-10821

https://github.com/BlackCatDevelopment/BlackCatCMS/issues/384

File Snapshot


 [4.0K]  /data/pocs/27ea08b316877a8c8833f1f40dc7c6cc559909d8
├── [632K]  blackcat.docx
└── [ 221]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!