CVE-2022-25323: research/CVE-2022-25323.md at main · awillix/research

Permalink

1 contributor

Users who have contributed to this file

CVE-2022-25323****Suggested description

ZEROF Web Server allows /admin.back XSS.

Vulnerability Type

Cross Site Scripting (XSS)

Vendor of Product

ZEROF

Affected Product Code Base

Web Server

Affected Component

/admin.back

Attack Type

Remote

Impact Code execution

true

Attack Vectors

Remote https:/zerof/admin.back<img src=a onerror=alert(1)>

Discoverer

Igor Landyrev, AWILLIX LLC

Reference

https://awillix.ru