CVE-2024-11587 PoC — Wangtai idcCMS 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11587.yaml

Associated Vulnerability

Title:Wangtai idcCMS 安全漏洞 (CVE-2024-11587)
Description:Wangtai idcCMS是中国网钛（Wangtai）公司的一个云管理代理系统。 Wangtai idcCMS 1.60版本存在安全漏洞，该漏洞源于对参数 idName 的不当操作，会导致跨站脚本攻击。

Description

idcCMS V1.60 is vulnerable to reflected cross-site scripting (XSS) via the idName parameter in read.php. Unsanitized user input is reflected in the response, allowing arbitrary JavaScript execution.

File Snapshot


 id: CVE-2024-11587

info:
  name: idcCMS V1.60 - Cross-Site Scripting
  author: ritikchaddha
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!