CVEs-PoC/2018/CVE-2018-20503.md

CVE-2018-20503

Description

Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4_interface.php vlanid or subnet_mask parameter.

POC

Reference

• http://packetstormsecurity.com/files/151327/SirsiDynix-e-Library-3.5.x-Cross-Site-Scripting.html
• https://pentest.com.tr/exploits/Allied-Telesis-8100L-8-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/46237/

Github

• https://github.com/ARPSyndicate/cvemon