Advertisement
CVE | Category | Price | Severity |
---|---|---|---|
CVE-2021-42625 | CWE-79 | $500 | High |
Author | Risk | Exploitation Type | Date |
---|---|---|---|
Unknown | High | Remote | 2023-03-30 |
CVSS | EPSS | EPSSP |
---|---|---|
Not specified | 0.0214 | 0.00159 |
# Exploit Title: Eve-ng 5.0.1-13 - Stored Cross-Site Scripting (XSS) # Google Dork: N/A # Date: 12/6/2022 # Exploit Author: @casp3r0x0 hassan ali al-khafaji # Vendor Homepage: https://www.eve-ng.net/ # Software Link: https://www.eve-ng.net/index.php/download/ # Version: Free EVE Community Edition Version 5.0.1-13 # Tested on: Free EVE Community Edition Version 5.0.1-13 # CVE : N/A #we could achieve stored XSS on eve-ng free I don't know If this effect pro version also #first create a new lab #second create a Text label #insert the xss payload and click save "><script>alert(1)</script> #the application is multi user if any user open the lab the xss will be triggered.
Copyright ©2024 Exploitalert.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.