Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site S…
Medium CVSS 5.4
Summary
Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=<script>alert(document.cookie)</script>` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=";</script><script>alert(1);a="&PathData=&originalName=shell.aspx&F…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://csirt.divd.nl/2021/07/07/Kaseya-Limited-Disclosure/ Patch
- https://csirt.divd.nl/CVE-2021-30119 Exploit
- https://csirt.divd.nl/DIVD-2021-00011 Patch
- https://csirt.divd.nl/2021/07/07/Kaseya-Limited-Disclosure/ Patch
- https://csirt.divd.nl/CVE-2021-30119 Exploit
- https://csirt.divd.nl/DIVD-2021-00011 Patch
Timeline
- nvd_ingest NVD