CVEs-PoC/2017/CVE-2017-11175.md

CVE-2017-11175

Description

In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login.

POC

Reference

• https://github.com/miruser/Roche-CVEs/blob/master/CVE-2017-11175.md
• https://github.com/miruser/Roche-CVEs/blob/master/CVE-2017-11175.md

Github

• https://github.com/rochesecurity/Roche-CVEs