CVE-2024-50857 PoC — GestioIP 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50857.yaml

Associated Vulnerability

Title:GestioIP 安全漏洞 (CVE-2024-50857)
Description:GestioIP是GestioIP公司的一款基于 Web 的 IPv4/IPv6 地址管理软件。 GestioIP v3.5.7版本存在安全漏洞，该漏洞源于容易受到跨站脚本攻击（XSS），导致数据泄露和跨站请求伪造（CSRF）攻击。

Description

GestioIP v3.5.7 contains a reflected cross-site scripting caused by unsanitized input in the ip_do_job request, letting attackers execute scripts in the victim's browser, exploit requires specific user permissions.

File Snapshot


 id: CVE-2024-50857

info:
  name: GestioIP - Reflected Cross-Site Scripting
  author: Gaurang
  seve

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!