Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=<script>alert(document.cookie)</script>` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=";</script><script>alert(1);a="&PathData=&originalName=shell.aspx&FileSize=4388&TimeElapsed=00:00:00.078`
oryginał ENCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NKaseya Vsa
APPKaseya< 9.5.7
Powiązane podatności
The API call /InstallTab/exportFldr.asp is vulnerable to a semi-authenticated boolean-based blind SQL injectio...
An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monito...
Kaseya VSA before 9.5.7 allows attackers to bypass the 2FA requirement. The need to use 2FA for authentication...
The API /vsaWS/KaseyaWS.asmx can be used to submit XML to the system. When this XML is processed (external) en...
Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Examp...