.. / CVE-2015-1880

• XSS
• Nuclei
• Web

Exploit for Fortinet FortiOS <=5.2.3 - Cross-Site Scripting (CVE-2015-1880)

Description:

Fortinet FortiOS 5.2.x before 5.2.3 contains a cross-site scripting vulnerability in the SSL VPN login page which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Nuclei Template

View the template here CVE-2015-1880.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2015/CVE-2015-1880.yaml

References: