Eve-ng 5.0.1-13 – Stored Cross-Site Scripting (XSS)

• Exploit Database
• 14 阅读

• 作者： @casp3r0x0 hassan ali al-khafaji
  日期： 2023-03-30
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/51153/

• # Exploit Title: Eve-ng 5.0.1-13 - Stored Cross-Site Scripting (XSS) 
  # Google Dork: N/A
  # Date: 12/6/2022
  # Exploit Author: @casp3r0x0 hassan ali al-khafaji
  # Vendor Homepage: https://www.eve-ng.net/
  # Software Link: https://www.eve-ng.net/index.php/download/
  # Version: Free EVE Community Edition Version 5.0.1-13
  # Tested on: Free EVE Community Edition Version 5.0.1-13
  # CVE : N/A
  
  
  
  #we could achieve stored XSS on eve-ng free I don't know If this
  effect pro version also
  #first create a new lab
  #second create a Text label
  #insert the xss payload and click save "><script>alert(1)</script>
  #the application is multi user if any user open the lab the xss will be triggered.