sahiloj/CVE-2023-34836

PoC

A Reflected Cross-Site Scripting (XSS) vulnerability exists in Microworld Technologies eScan Management Console v14.0.1400.2281. The vulnerable parameters are Dtltyp and ListName, which are processed as part of the File Activity Report feature under the User Activity section.

view exploit source poc_in_githubauthor sahilojpublished 2023-06-23catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2023-34836USmedium5.4Exploit
A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code via a crafted script to…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan