The exploit demonstrates a CSRF vulnerability allowing arbitrary file deletion and an XSS vulnerability in Monsta FTP v1.6.2 due to unsanitized user input in the 'openFolder' parameter. The PoC includes functional HTML/JavaScript code for both attacks.
Classification
Working Poc 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target:Monsta FTP v1.6.2
No auth needed
Prerequisites:Victim must access a malicious URL or page