cve/2017/CVE-2017-14096.md

### [CVE-2017-14096](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14096)
![](https://img.shields.io/static/v1?label=Product&message=Trend%20Micro%20Smart%20Protection%20Server%20(Standalone)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Cross%20Site%20Scripting%20(XSS)&color=brighgreen)

### Description

A stored cross site scripting (XSS) vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to execute a malicious payload on vulnerable systems.

### POC

#### Reference
- https://www.coresecurity.com/advisories/trend-micro-smart-protection-server-multiple-vulnerabilities
- https://www.exploit-db.com/exploits/43388/

#### Github
- https://github.com/lean0x2F/lean0x2f.github.io