Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-42362 | Kitploit
Tools/GitHubGitHub/mr-n0b3dy/cve-2023-42362
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubmr-n0b3dy/cve-2023-42362

CVE-2023-42362

View Repository
2 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-42362

Author: Abdelrahman Mohamed (Mr-n0b3dy)

Linked-in: https://www.linkedin.com/in/abdelrhman-mohamed-ashraf-7bb43410b/

Vulnerability Name: Unrestricted File Upload that led to ATO

Severity: High

Product: NCR teller web app

Version: 4.4.0

Description:

The Unrestricted File Upload leading to Stored Cross-Site Scripting (XSS) vulnerability is a security issue identified within the web application. This vulnerability arises due to a lack of proper input validation in the file upload functionality.

Impact:

Attackers can upload a malicious file containing JavaScript code that enables them to hijack the admin session, which is already stored in the local storage. This breach could result in an account takeover of the admin account, granting them full access to administrator functionalities.

Recommendations:

Install the latest version of the NCR Teller web app.

Download Tool