cve/2019/CVE-2019-7400.md

CVE-2019-7400

Description

Rukovoditel before 2.4.1 allows XSS.

POC

Reference

• http://packetstormsecurity.com/files/152248/Rukovoditel-ERP-And-CRM-2.4.1-Cross-Site-Scripting.html
• https://hackpuntes.com/cve-2019-7400-rukovoditel-erp-crm-2-4-1-cross-site-scripting-reflejado/
• https://www.exploit-db.com/exploits/46608/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/JavierOlmedo/JavierOlmedo