EDB-51635

functional

copyparty v1.8.6 - Reflected Cross Site Scripting (XSS)

view exploit source exploit_dbverifiedtype webappsauthor Vartamtezidis Theodorospublished 2023-07-28catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-38501USmedium6.1Exploit
copyparty is file server software. Prior to version 1.8.7, the application contains a reflected cross-site scripting via URL-parameter `?k304=...` and `?setck=...`. The worst-case…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan