CVE-2021-21799 PoC — Advantech R-SeeNet 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21799.yaml

Associated Vulnerability

Title:Advantech R-SeeNet 跨站脚本漏洞 (CVE-2021-21799)
Description:Advantech R-SeeNet是中国台湾研华（Advantech）公司的一个工业监控软件。该软件基于 snmp 协议进行监控平台，并且适用于 Linux、Windows 平台。 Advantech R-SeeNet v2.4.12存在跨站脚本漏洞，该漏洞源于如果用户访问一个特殊设计的URL，它可能导致在目标用户的浏览器上下文中执行任意的JavaScript代码。

Description

Advantech R-SeeNet 2.4.12 contains a reflected cross-site scripting vulnerability in the telnet_form.php script functionality.

File Snapshot


 id: CVE-2021-21799

info:
  name: Advantech R-SeeNet 2.4.12 - Cross-Site Scripting
  author: arafata

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!