CVE-2022-45436 PoC — Stored cross-site scripting vulnerability in network maps editor feature

Source

https://github.com/damodarnaik/CVE-2022-45436

Associated Vulnerability

Title:Stored cross-site scripting vulnerability in network maps editor feature (CVE-2022-45436)
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Artica PFMS Pandora FMS v765 on all platforms, allows Cross-Site Scripting (XSS). As a manager privilege user , create a network map containing name as xss payload. Once created, admin user must click on the edit network maps and XSS payload will be executed, which could be used for stealing admin users cookie value.

Readme

# CVE-2022-45436
Reflected Cross Site Scripting leading to session hijacking in pandorafms <= Package v765 RRR.

#### > Exploit Title: Reflected Cross Site Scripting
#### > Date: 15/02/2023
#### > Exploit Author: Damodar Naik
#### > Vendor Homepage: https://pandorafms.com/en/
#### > Software Link: https://github.com/pandorafms/pandorafms
#### > Version: <= v765 RRR
#### > Tested on: Ubuntu
#### > CVE ID: CVE-2022-45436


### Steps to reproduce

Get the request by hitting the help button in the "http://localhost:8080/pandora_console/index.php?sec=network&sec2=operation/agentes/pandora_networkmap". (As shown in POC).
    Add the payload in the "b" parameter in the request.
    Copy the URL with payload in it, and it to the user logged in as admin.
    When Admin user try to visit the malicious link payload will gets executed.
XSS payload will be executed, which could be used for stealing admin users cookie value, etc.

File Snapshot


 [4.0K]  /data/pocs/4fc2efdb9e3fed2cdfba8d51927fb98534edd096
└── [ 930]  README.md

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!