Skip to content

Instantly share code, notes, and snippets.

@delyura

delyura/gist:b7419cab29f4105df1c1fbe5d99edd7c Secret

Created September 21, 2022 11:45
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save delyura/b7419cab29f4105df1c1fbe5d99edd7c to your computer and use it in GitHub Desktop.
Save delyura/b7419cab29f4105df1c1fbe5d99edd7c to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
CVE-2022-XXXXX
------------------------------------------
[Suggested description]
EyesOfNetwork web interface 5.3 allows admins to conduct reflected XSS attacks.
------------------------------------------
[Vulnerability Type]
Cross Site Scripting (XSS)
------------------------------------------
[Vendor of Product]
EyesOfNetwork
------------------------------------------
[Affected Product Code Base]
EyesOfNetwork web interface 5.3
------------------------------------------
[Affected Component]
We found reflected xss at /module/admin_bp/add_application.php
------------------------------------------
[Attack Type]
Remote
------------------------------------------
[Attack Vectors]
https://github.com/EyesOfNetworkCommunity/eonweb/issues/118
The vulnerable parameter is GET-parameter bp_name.
------------------------------------------
[Reference]
EyesOfNetwork web interface 5.3 (https://github.com/EyesOfNetworkCommunity/eonweb)
------------------------------------------
[Discoverer]
Yuriy Bairov, Dmitriy Tatarov
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment