Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
iVANTI-CVE-2021-38560 — Proof-of-concept for reflected XSS in Ivanti Service Manager 2021.1 via appName parameter in RelocateAttachments.aspx, affecting versions up to 2021.3. | Kitploit
Tools/GitHubGitHub/os909/ivanti-cve-2021-38560
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubos909/ivanti-cve-2021-38560

iVANTI-CVE-2021-38560

Proof-of-concept for reflected XSS in Ivanti Service Manager 2021.1 via appName parameter in RelocateAttachments.aspx, affecting versions up to 2021.3.

View Repository
124 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

iVANTI-CVE-2021-38560

Ivanti Service Manager 2021.1 infected with reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.

Vulnerability Type: Cross Site Scripting (XSS)

Vendor of Product: IVANTI

Affected Product Versions: Service Manager - (=<2021.3)

Payload:

http://localhost/HEAT/maintenance/RelocateAttachments.aspx?appId=2-IVNTI-APP02.localhost&appName=%27">ConfigDB

Patched Version: https://forums.ivanti.com/s/article/Ivanti-Neurons-for-ITSM-ITAM-v2021-4-Download?ui-force-components-controllers-recordGlobalValueProvider.RecordGvp.getRecord=1

Download Tool