Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-6275 — Reflected Cross-Site Scripting in TOTVS Fluig Plataform 1.6.X - 1.8.1 | Kitploit
Tools/GitHubGitHub/erickfernandox/cve-2023-6275
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHuberickfernandox/cve-2023-6275

CVE-2023-6275

Reflected Cross-Site Scripting in TOTVS Fluig Plataform 1.6.X - 1.8.1

View Repository
11 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-6275 - Reflected Cross-Site Scripting in TOTVS Fluig Plataform 1.6.X - 1.8.1

The TOTVS Fluig platform, in its versions from 1.6.1.X to 1.8.1, is vulnerable to Cross-Site Scripting in the 'redirectUrl' and 'user' parameters within the 'mobileredir' module.

Fluig is the productivity and collaboration platform that integrates with the ERP system, developed by Brazil's largest technology company, TOTVS, and hosted on the client's server.

Versions affecteds:

-- Fluig 1.6.X - Fluig 1.8.1 …

Attack Vector

https://fluig.host.com/mobileredir/openApp.jsp?redirectUrl=PAYLOAD

https://fluig.host.com/mobileredir/openApp.jsp?user=PAYLOAD

Payloads:

https://fluig.host.com/mobileredir/openApp.jsp?redirectUrl="> https://fluig.host.com/mobileredir/openApp.jsp?user=">

Download Tool