[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Cloudron 6.2 Cross Site Scripting Vulnerability

Author
Akiner Kisa
Risk
[
Security Risk Medium
]
0day-ID
0day-ID-36767
Category
web applications
Date add
17-09-2021
CVE
CVE-2021-31721
Platform
php
# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)
# Exploit Author: Akıner Kısa
# Vendor Homepage: https://cloudron.io
# Software Link: https://www.cloudron.io/get.html
# Version: 6.3 >
# Tested on: Demo / Localhost
# CVE : CVE-2021-31721

Proof of Concept:

1. Go to https://my.demo.cloudron.io/login.html?returnTo=


2. Type your payload after returnTo=

3. Fill in the login information and press the sign in button.

#  0day.today [2024-12-25]  #