CVE-2022-48197 PoC — yahoo YUI2 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48197.yaml

Associated Vulnerability

Title:yahoo YUI2 跨站脚本漏洞 (CVE-2022-48197)
Description:YUI是YUI Library开源的一个 JavaScript 和 CSS 库。 yahoo YUI2存在安全漏洞，该漏洞源于up.php sam.php renderhidden.php removechildren.php removeall.php readd.php overflow.php newnode2.php newnod存在跨站脚本漏洞。

Description

Reflected cross-site scripting (XSS) exists in the TreeView of YUI2 through 2800: up.php sam.php renderhidden.php removechildren.php removeall.php readd.php overflow.php newnode2.php newnode.php.

File Snapshot


 id: CVE-2022-48197

info:
  name: Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site S

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!