Exploitation Summary
EIP tracks 1 public exploit for CVE-2023-36085. PoCs published by omershaik0.
AI-analyzed exploit summary This repository provides a detailed writeup and proof-of-concept for CVE-2023-36085, a host header injection vulnerability in SISQUALWFM version 7.1.319.103. The vulnerability allows an attacker to manipulate webpage links or redirect users to a malicious site by tampering with the host header in requests to the `/sisqualIdentityServer/core` endpoint.
Description
The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" endpoint. By modifying the HTTP Host header, an attacker can change webpage links and even redirect users to arbitrary or malicious locations. This can lead to phishing attacks, malware distribution, and unauthorized access to sensitive resources.
Exploits (1)
This repository provides a detailed writeup and proof-of-concept for CVE-2023-36085, a host header injection vulnerability in SISQUALWFM version 7.1.319.103. The vulnerability allows an attacker to manipulate webpage links or redirect users to a malicious site by tampering with the host header in requests to the `/sisqualIdentityServer/core` endpoint.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N