CVEs-PoC/2017/CVE-2017-15008.md

CVE-2017-15008

Description

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element.

POC

Reference

• https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b
• https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b

Github

No PoCs found on GitHub currently.