mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
711 B
711 B
CVE-2020-35388
Description
rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true.
POC
Reference
- https://github.com/xuechengen/xinhu-oa/blob/main/README.md
- https://github.com/xuechengen/xinhu-oa/blob/main/README.md
Github
No PoCs found on GitHub currently.