CVEs-PoC/2019/CVE-2019-7417.md

CVE-2019-7417

Description

XSS exists in Ericsson Active Library Explorer (ALEX) 14.3 in multiple parameters in the "/cgi-bin/alexserv" servlet, as demonstrated by the DB, FN, fn, or id parameter.

POC

Reference

• http://packetstormsecurity.com/files/151583/Ericsson-Active-Library-Explorer-ALEX-14.3-Cross-Site-Scripting.html
• http://seclists.org/fulldisclosure/2019/Feb/27

Github

No PoCs found on GitHub currently.