Exploitation Summary
EIP tracks 2 public exploits for CVE-2022-41358. PoCs published by ub3rsick, thecasual.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Garage Management System 1.0 by bypassing client-side validation via a crafted POST request to the `createCategories.php` endpoint. The payload injects a malicious script into the `categoriesName` parameter, which is then stored and executed in the context of the application.
Description
A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the categoriesName parameter in createCategories.php.
Exploits (2)
This exploit demonstrates a stored XSS vulnerability in Garage Management System 1.0 by bypassing client-side validation via a crafted POST request to the `createCategories.php` endpoint. The payload injects a malicious script into the `categoriesName` parameter, which is then stored and executed in the context of the application.
This PoC demonstrates a stored XSS vulnerability in Garage Management System 1.0 by bypassing client-side validation via Burp Suite. The exploit modifies the 'categoriesName' parameter to inject a malicious script, which is then stored and executed in the application.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N