CVE-2021-42565 PoC — myfactory.FMS 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42565.yaml

Associated Vulnerability

Title:myfactory.FMS 跨站脚本漏洞 (CVE-2021-42565)
Description:myfactory.FMS是一个交易管理系统。 Myfactory.FMS 中存在跨站脚本漏洞，该漏洞源于产品的UID参数未能正确验证用户输入数据。攻击者可通过该漏洞执行客户端代码。以下产品及版本受到影响：myfactory.FMS 7.1-912 版本及之前版本。

Description

myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter.

File Snapshot


 id: CVE-2021-42565

info:
  name: myfactory FMS  -  Cross-Site Scripting
  author: madrobot
  severi

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!