EDB-38316

PoC

FortiManager 5.2.2 - Persistent Cross-Site Scripting

view exploit source exploit_dbtype webappsauthor hyp3rlinxpublished 2015-09-25catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2015-8038US	medium4.3	2.77% (86th)	Exploit	2015-11-02
Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web scrip…
CVE-2015-8037US	medium4.3	2.77% (86th)	Exploit	2015-11-02
Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager before 5.2.4 allow remote attackers to inject arbitrary web scrip…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.