Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50963. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary This is a detailed technical writeup describing multiple non-persistent XSS vulnerabilities in uBidAuction v2.0.1. It includes affected parameters, modules, and proof-of-concept URLs demonstrating the exploitation of vulnerable GET parameters.
Description
uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the auctions/myAuctions/status/active module. The date_created, date_from, date_to, and created_at parameters in the filter functionality are not properly sanitized, allowing remote attackers to inject malicious scripts via crafted GET requests that execute in victims' browsers.
Exploits (1)
This is a detailed technical writeup describing multiple non-persistent XSS vulnerabilities in uBidAuction v2.0.1. It includes affected parameters, modules, and proof-of-concept URLs demonstrating the exploitation of vulnerable GET parameters.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N