CVE-2017-7998
MEDIUMgespage < 7.4.9 - Stored Cross-Site Scripting via Printer Name or Username Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2017-7998. PoCs published by tnpitsecurity, homjxi0e.
AI-analyzed exploit summary The repository contains a functional Python script and detailed instructions for exploiting an SQL injection vulnerability in Gespage, allowing attackers to reset the admin password and gain unauthorized access. The PoC includes curl commands for detection and a script for exploitation.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Gespage before 7.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) printer name when adding a printer in the admin panel or (2) username parameter to webapp/users/user_reg.jsp.
Exploits (2)
The repository contains a functional Python script and detailed instructions for exploiting an SQL injection vulnerability in Gespage, allowing attackers to reset the admin password and gain unauthorized access. The PoC includes curl commands for detection and a script for exploitation.
This PoC exploits CVE-2017-7998 by modifying the .bashrc file to execute a denial-of-service (DoS) attack. It creates and executes scripts to remove the .bashrc file, effectively disrupting the user's shell environment.
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N