New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Found xss vulnerability and Information Disclosure Vulnerability in post-edit.php #46

Open

onEpAth936 opened this issue Jul 9, 2022 · 0 comments

onEpAth936 commented Jul 9, 2022

environment:

php.7.3.4
win10

First,you need to Login the backstage here: /mc-admin/

Second,use payload: /mc-admin/post-edit.php?id=%3Cscript%3Ealert%285%29%3C/script%3E

you will see Pop-ups,then click here :

you will see Web Directory leak out like this:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment