Boonex Dolphin 7.4.2 Cross Site Scripting ≈ Packet Storm – Digitalmunition




Exploit/Advisories no-image-featured-image.png

Published on March 20th, 2021 📆 | 5226 Views ⚑

0

Boonex Dolphin 7.4.2 Cross Site Scripting ≈ Packet Storm

Boonex Dolphin 7.4.2 Cross Site Scripting
Posted Mar 19, 2021
Authored by Piyush Patil

Boonex Dolphin version 7.4.2 suffers from a persistent cross site scripting vulnerability.

tags | exploit, xss
MD5 | 184f1fed969d0f5d89528bcd9596ddea
# Exploit Title: Boonex Dolphin 7.4.2 - 'width' Stored XSS
# Date: 18-03-2021
# Exploit Author: Piyush Patil
# Vendor Homepage: https://www.boonex.com/
# Software Link: https://www.boonex.com/downloads
# Version: 7.4.2
# Tested on: Windows 10

# Reference - https://github.com/xoffense/POC/blob/main/Boonex%20Dolphin%20CMS%207.4.2%20%20stored%20XSS

Steps to Reproduce Bug:
1- Login to Admin Panel
2- Goto "Builders" => "Pages Builder"
3- Select any page
4- Turn on Burp Suite Intercept and Change "other pages width" to "1081px"

Source link

Tagged with:



Leave a Reply