EDB-49981

PoC

Cerberus FTP Web Service 11 - 'svg' Stored Cross-Site Scripting (XSS)

view exploit source exploit_dbtype webappsauthor Mohammad Hossein Kaviyanypublished 2021-06-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2019-25046USmedium6.1Exploit
The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan