CVE-2021-25679 PoC — ADTRAN AdTran-Personal-Phone-Manager-Vulns 跨站脚本漏洞

Source

https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns

Associated Vulnerability

Title:ADTRAN AdTran-Personal-Phone-Manager-Vulns 跨站脚本漏洞 (CVE-2021-25679)
Description:ADTRAN AdTran-Personal-Phone-Manager-Vulns是德国ADTRAN公司的一个应用程序。一个个人电话管理器。 AdTran Personal Phone Manager 10.8.1版本及以下版本存在跨站脚本漏洞，该漏洞源于容易受到身份验证存储跨站脚本(XSS)问题的攻击。

Description

A repository hosting write ups for the 0 days CVE-2021-25679, CVE-2021-25680, and CVE-2021-25681

Readme

# AdTran-Personal-Phone-Manager-Vulns
A repository hosting write ups for the 0 days CVE-2021-25679, CVE-2021-25680, and CVE-2021-25681.

# Summary
- [CVE-2021-25679](CVE-2021-25679.md): Adtran Personal Phone Manager Authenticated Stored XSS in Change Email Address Form
- [CVE-2021-25680](CVE-2021-25680.md): Adtran Personal Phone Manager Multiple Reflected XSS
- [CVE-2021-25681](CVE-2021-25681.md): AdTran Personal Phone Manager DNS Exfiltration

File Snapshot


 [4.0K]  /data/pocs/cda83f05a4d9946fa8da2c3a2c73a75bbb795f37
├── [4.5K]  CVE-2021-25679.md
├── [5.7K]  CVE-2021-25680.md
├── [4.1K]  CVE-2021-25681.md
└── [ 449]  README.md

0 directories, 4 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!