CVE-2021-31682 PoC — Automated Logic WebCTRL System 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31682.yaml

Associated Vulnerability

Title:Automated Logic WebCTRL System 跨站脚本漏洞 (CVE-2021-31682)
Description:Automated Logic WebCTRL System 6.5是美国Automated Logic公司的一个应用软件。提供集成警报管理和预测性HVAC计划。 Automated Logic WebCTRL/WebCTRL OEM web存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。

Description

WebCTRL OEM 6.5 and prior is susceptible to a cross-site scripting vulnerability because the login portal does not sanitize the operatorlocale GET parameter.

File Snapshot


 id: CVE-2021-31682

info:
  name: WebCTRL OEM <= 6.5 - Cross-Site Scripting
  author: gy741,dhiyanes

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!