Published: 24/05/2023 Updated: 31/05/2023

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 0

A stored cross-site scripting (XSS) vulnerability in Cloudogu GmbH SCM Manager v1.2 to v1.60 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the Description text field.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cloudogu scm manager

SCM Manager versions 12 through 160 suffer from a persistent cross site scripting vulnerability ...

Proof of Concept about a XSS Stored in SCM Manager 1.2 <= 1.60

CVE-2023-33829: Stored-XSS-on-SCM-Manager-160 Summary A vulnerability is discovered in the SCM Manager 12 <= 160 version that allows an attackers previously authenticated with write permissions execute javascript code in specific fields This Proof of Concept is maded in a local environment deploying a SCM Manager 160 using docker CVE published: wwwincibee

SCM Manager XSS

CVE-2023-33829-POC SCM Manager XSS

Proof of Concept about a XSS Stored in SCM Manager 1.2 <= 1.60

CVE-2023-33829: Stored-XSS-on-SCM-Manager-160 Summary A vulnerability is discovered in the SCM Manager 12 <= 160 version that allows an attackers previously authenticated with write permissions execute javascript code in specific fields This Proof of Concept is maded in a local environment deploying a SCM Manager 160 using docker CVE published: wwwincibee

作为P佬vulhub中没有漏洞的补充

VulhubExpand 有时会遇到一些vulhub上没有的漏洞，故作此项目为补充。 Usage # 下载项目 wget githubcom/wi1kwegam4a/VulhubExpand/archive/refs/heads/mainzip unzip mainzip cd VulhubExpand-main # 进入某一个漏洞/环境的目录 cd SCM-Manager/CVE-2023-33829 # 启动整个环境 docker compose up -d 每

CWE-79 https://bitbucket.org/sdorra/docker-scm-manager/src/master/https://github.com/n3gox/Stored-XSS-on-SCM-Manager-1.60 http://packetstormsecurity.com/files/172588/SCM-Manager-1.60-Cross-Site-Scripting.html https://nvd.nist.gov https://packetstormsecurity.com/files/172588/SCM-Manager-1.60-Cross-Site-Scripting.html https://github.com/n3gox/CVE-2023-33829

CVE-2023-33829

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect