CVE-2017-9609 PoC — Blackcat CMS 跨站脚本漏洞

Source

https://github.com/faizzaidi/Blackcat-cms-v1.2-xss-POC-by-Provensec-llc

Associated Vulnerability

Title: Blackcat CMS 跨站脚本漏洞 (CVE-2017-9609)
Description:Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via the map_language parameter to backend/pages/lang_settings.php.

Description

BlackCat-CMS-Bundle-v1.2 Cross Site Scripting(XSS) Assigned CVE Number: CVE-2017-9609

Readme

# Blackcat-cms-v1.2-xss-POC-by-Provensec-llc
BlackCat-CMS-Bundle-v1.2 Cross Site Scripting(XSS) Assigned CVE Number: CVE-2017-9609

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →