CVEs-PoC/2018/CVE-2018-14924.md

CVE-2018-14924

Description

Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field.

POC

Reference

• https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9
• https://medium.com/stolabs/security-issues-on-matera-systems-fba14d207dc9

Github

• https://github.com/sketler/sketler