CVE-2017-5631 PoC — KMCIS CaseAware 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5631.yaml

Associated Vulnerability

Title:KMCIS CaseAware 跨站脚本漏洞 (CVE-2017-5631)
Description:KMCIS CaseAware是一套用于默认情况管理的单一解决方案。该系统具有高度可扩展性，使用行业标准格式和行业标准传输方法等特点。 KMCIS CaseAware中的login.php文件存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意Web脚本或HTML。

Description

KMCIS CaseAware contains a reflected cross-site scripting vulnerability via the user parameter transmitted in the login.php query string.

File Snapshot


 id: CVE-2017-5631

info:
  name: KMCIS CaseAware - Cross-Site Scripting
  author: edoardottt
  sever

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!