Cloudron version 6.2 suffers from a cross site scripting vulnerability.
6dd26254a5db463a27e4a4d96e18fc8e0c44493f9ed64caa444e635d4da9cbd0# Exploit Title: Cloudron 6.2 - Cross Site Scripting (Reflected)
# Google Dork: N/A
# Date: 10.06.2021
# Exploit Author: Akıner Kısa
# Vendor Homepage: https://cloudron.io
# Software Link: https://www.cloudron.io/get.html
# Version: 6.3 >
# Tested on: Demo / Localhost
# CVE : CVE-2021-31721
Proof of Concept:
1. Go to https://my.demo.cloudron.io/login.html?returnTo=
2. Type your payload after returnTo=
3. Fill in the login information and press the sign in button.
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed