Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-35956. PoCs published by Tyler Butler, tcbutler320.
AI-analyzed exploit summary This exploit demonstrates stored XSS vulnerabilities in AKCP sensorProbe's web interface via System Settings, Email Settings, and Sensor Description fields. The PoC includes HTTP POST requests with malicious payloads that trigger JavaScript execution when rendered.
Description
Stored cross-site scripting (XSS) in the embedded webserver of AKCP sensorProbe before SP480-20210624 enables remote authenticated attackers to introduce arbitrary JavaScript via the Sensor Description, Email (from/to/cc), System Name, and System Location fields.
Exploits (2)
This exploit demonstrates stored XSS vulnerabilities in AKCP sensorProbe's web interface via System Settings, Email Settings, and Sensor Description fields. The PoC includes HTTP POST requests with malicious payloads that trigger JavaScript execution when rendered.
The repository provides functional HTTP request examples demonstrating stored XSS vulnerabilities in AKCP sensorProbe's web interface via System Settings, Email Settings, and Sensor Description fields. The PoC includes crafted payloads with SVG-based JavaScript execution.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N