CVE-2018-20165 PoC — OpenText Portal 跨站脚本漏洞

Source

https://github.com/hect0rS/Reflected-XSS-on-Opentext-Portal-v7.4.4

Associated Vulnerability

Title:OpenText Portal 跨站脚本漏洞 (CVE-2018-20165)
Description:OpenText Portal是加拿大OpenText公司的一套企业门户系统。该系统为企业提供内容聚合和内容管理功能。 OpenText Portal 7.4.4版本中存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。

Description

Reflected XSS on Opentext Portal v7.4.4: CVE-2018-20165

File Snapshot


 [4.0K]  /data/pocs/96b0b822a46400fc85457e5daf89a808de3eb613
├── [ 44K]  Evidence 1.PNG
├── [ 62K]  Evidence 2.PNG
└── [ 532]  readme.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!