CVE-2021-46387
MEDIUM NUCLEIZyXEL ZyWALL 2 Plus Internet Security Appliance Firmware - Cross-Site Scripting via Insecure URI Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-46387. PoCs published by Momen Eldawakhly. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in Zyxel ZyWALL 2 Plus by injecting a malicious payload into the 'id' parameter of the '/Forms/rpAuth_1' endpoint, triggering a JavaScript prompt via an img tag's onerror event.
Description
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard hijacking and session hijacking.
Exploits (1)
This exploit demonstrates a reflected XSS vulnerability in Zyxel ZyWALL 2 Plus by injecting a malicious payload into the 'id' parameter of the '/Forms/rpAuth_1' endpoint, triggering a JavaScript prompt via an img tag's onerror event.
Nuclei Templates (1)
http.title:"Zywall2Plus" || http.title:"zywall2plus"
title="zywall2plus"
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N