CVE-2007-0885 PoC — Rainbow 'BrowseProject.jsp'跨站脚本攻击漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-0885.yaml

Associated Vulnerability

Title:Rainbow 'BrowseProject.jsp'跨站脚本攻击漏洞 (CVE-2007-0885)
Description:Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extension allows remote attackers to inject arbitrary web script or HTML via the id parameter.

Description

Jira Rainbow.Zen contains a cross-site scripting vulnerability via Jira/secure/BrowseProject.jspa which allows remote attackers to inject arbitrary web script or HTML via the id parameter.

File Snapshot


 id: CVE-2007-0885

info:
  name: Jira Rainbow.Zen - Cross-Site Scripting
  author: geeknik
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!