Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2022-35416 PoC — H3C SSL VPN 跨站脚本漏洞

Source
https://github.com/safe3s/CVE-2022-35416
Associated Vulnerability
Title:H3C SSL VPN 跨站脚本漏洞 (CVE-2022-35416)
Description:H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.
Description
H3C_SSL_VPN_XSS(Reflected XSS) CVE-2022-35416
Readme
# CVE-2022-35416
H3C_SSL_VPN_XSS(Reflected XSS) CVE-2022-35416
# from  https://www.cloudwaf.cc/cve/cve-2022-35416 

Payload:
Shodan: http.html_hash:510586239
Access address：https://IP:PORT/wnm/login/login.json.
Payload: Cookie: svpnlang=__XSS_PAYLOAD__


Description
H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.

Good luck!
File Snapshot

 [4.0K]  /data/pocs/f6926842d5d39f53baf3fca7e97b8585831526cb
└── [ 361]  README.md

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →