CVE-2021-43725 PoC — Spotweb 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43725.yaml

Associated Vulnerability

Title:Spotweb 跨站脚本漏洞 (CVE-2021-43725)
Description:Spotweb是Spotweb团队的一款基于Php的遵循Spotnet协议的Soptnet客户端。 Spotweb 1.5.1版本及之后版本存在跨站脚本漏洞，该漏洞源于SpotPage_login.php中存在跨站脚本(XSS)漏洞。远程攻击者利用该漏洞通过data[performredirect]参数注入任意Web脚本或HTML。

Description

There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the data[performredirect] parameter.

File Snapshot


 id: CVE-2021-43725

info:
  name: Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)
  author: thea

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!