Skip to content

Instantly share code, notes, and snippets.

@rvismit

rvismit/CVE-2021-36381

Last active September 19, 2021 18:50
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save rvismit/c2da674254f53c40d3a9eb3896277ebc to your computer and use it in GitHub Desktop.
Save rvismit/c2da674254f53c40d3a9eb3896277ebc to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2021-36381
Raw
CVE-2021-36381
Product : Edifecs
CVE : CVE-2021-36381
Vulnerability : Content/Text Injection
Vulnerability Description : A vulnerability could allow an unauthenticated remote user to inject arbitary text into user browser.
Componenet : Web Application
#Steps to Reproduce
1). Navigate to Edifecs Console
2). Enter any random values for login (ex: admin | admin)
3). In URL after /tm/logon/logon.jsp?logon_error=<text>*
*text=please%20change%20the%20password
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment