Skip to content

Instantly share code, notes, and snippets.

import base64
import re
import xml.dom.minidom
import json
import uuid
import struct
import string
import random
import hashlib
import time
@harsh-bothra
harsh-bothra / CVE-2020-23989
Last active February 4, 2021 01:19
Cross-Site Scripting in NeDi 1.9C
Product: NeDi - Find IT
CVE: CVE-2020-23989
Version: 1.9C
Vulnerability: Reflected Cross-Site Scripting
Vulnerability Description: NeDi 1.9C allows Cross-Site Scripting via "oid" parameter at "pwsec.php" page.