Description
thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields. Attackers can submit crafted script payloads in operating_system, system_owner, system_username, system_password, system_description, and server_name parameters to execute arbitrary JavaScript in victim browsers.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| kostasmitroglou | thesystem | 1.0 | — |
References
- ExploitDB-47440 exploit
- thesystem GitHub Repository product
- VulnCheck Advisory: thesystem Persistent XSS third-party-advisory