EDB-50770
PoCThinfinity VirtualUI 2.5.41.0 - IFRAME Injection
view exploit source exploit_dbtype webappsauthor Daniel Moralespublished 2022-02-21catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-45092US | critical9.8 | Exploit | ||
Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan