CVE-2020-20988 PoC — Domainmod 跨站脚本漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20988.yaml

Associated Vulnerability

Title:Domainmod 跨站脚本漏洞 (CVE-2020-20988)
Description:Domainmod是Domainmod社区的一款基于PHP和MySQL的用于管理中心位置的域名和其它互联网资产的开源应用程序。 Domainmod 4.13版本存在跨站脚本漏洞，攻击者可以通过"or Expiring Between"参数中精心设计的有效负载执行任意 Web 脚本或 HTML。

Description

DomainMOD 4.13.0 is vulnerable to cross-site scripting via reporting/domains/cost-by-owner.php in the "or Expiring Between" parameter.

File Snapshot


 id: CVE-2020-20988

info:
  name: DomainMOD 4.13.0 - Cross-Site Scripting
  author: arafatansari
  s

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!