Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-36978. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary This exploit demonstrates a persistent cross-site scripting (XSS) vulnerability in Froxlor Server Management Panel 0.10.16. The vulnerability allows remote attackers to inject malicious script code via the `username`, `name`, and `firstname` input fields, which is then executed when an admin views the traffic stats.
Description
Froxlor Server Management Panel 0.10.16 contains a persistent cross-site scripting vulnerability in customer registration input fields. Attackers can inject malicious scripts through username, name, and firstname parameters to execute code when administrators view customer traffic modules.
Exploits (1)
This exploit demonstrates a persistent cross-site scripting (XSS) vulnerability in Froxlor Server Management Panel 0.10.16. The vulnerability allows remote attackers to inject malicious script code via the `username`, `name`, and `firstname` input fields, which is then executed when an admin views the traffic stats.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N