Skip to content

leonardobg/CVE-2022-24654

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 

Repository files navigation

CVE-2022-24654

PoC of CVE-2022-24654 - INTELBRAS ATA 200 Firmware 74.19.10.21

Authenticated stored Cross Site Scripting

Steps to Reproduce:

  1. Log in the equipment via your web browser
  2. Go to Management > Syslog
  3. In the "Field Server Address" inject the payload "-prompt("XSS")-"
  4. Click Save
  5. Exploit!

About

PoC for CVE-2022-24654

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published