CVE-2020-16270 PoC — OLIMPOKS 跨站脚本漏洞

Source

https://github.com/Security-AVS/CVE-2020-16270

Associated Vulnerability

Title:OLIMPOKS 跨站脚本漏洞 (CVE-2020-16270)
Description:OLIMPOKS是俄罗斯olimpoks的一个用于职业培训的移动设备应用。该软件提供提供了在移动设备上进行工业安全（Rostekhnadzor批准的认证区域），劳动保护，劳动保护，民防和紧急情况培训的机会。 OLIMPOKS 5.1.0版本存在跨站脚本漏洞，该漏洞源于Auth/Admin ErrorMessage。

Readme

# CVE-2020-16270

**[Suggested description]**: OLIMPOKS under 3.3.39 allows Auth/Admin ErrorMessage XSS.  
Remote Attacker can use discovered vulnerability to inject malicious JavaScript payload to victim’s browsers in context of vulnerable applications. Executed code can be used to steal administrator’s cookies, influence HTML content of targeted application and perform phishing-related attacks. Vulnerable application used in more than 3000 organizations in different sectors from retail to industries.  
**[Additional Information]**:   
A letter was sent to the vendor about the vulnerability. Vulnerability was confirmed by vendor.  
Vulnerability was confirmed by government agency: https://bdu.fstec.ru/vul/2020-04623  
**[Vulnerability Type]**: Cross Site Scripting (XSS)  
**[Vendor of Product]**: olimpoks.ru  
**[Affected Product Code Base]**: online olimpoks system under 3.3.39.  
**[Attack Type]**: Remote  
**[Impact Denial of Service]**: False  
**[Impact Information Disclosure]**: True  
**[Attack Vectors]**: Vulnerable URL and parameter: http://olimpoks.TARGET-HOST:9001/Auth/Admin?ErrorMessage=bb%27);alert(1);//  
**[Discovered]**: Alexander Semenenko, Luka Safonov, Sergey Zelensky  
**[Proof of Concept]**:  
![stack Overflow]( https://raw.githubusercontent.com/Aleksander-Semenenko/CVE-2020-16270/main/POC_CVE-2020-16270.png)

File Snapshot


 [4.0K]  /data/pocs/3d5e82a7f52c172b7d25474cf256a70175f3c8a0
├── [119K]  POC_CVE-2020-16270.png
└── [1.3K]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!