.. / CVE-2015-6544

Exploit for Combodo iTop <2.2.0-2459 - Cross-Site Scripting (CVE-2015-6544)

Description:

Combodo iTop before 2.2.0-2459 contains a cross-site scripting vulnerability in application/dashboard.class.inc.php which allows remote attackers to inject arbitrary web script or HTML via a dashboard title.

Nuclei Template

View the template here CVE-2015-6544.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2015/CVE-2015-6544.yaml
Copy

References:

https://www.htbridge.com/advisory/HTB23268
https://nvd.nist.gov/vuln/detail/CVE-2015-6544
http://sourceforge.net/p/itop/tickets/1114/
http://sourceforge.net/p/itop/code/3662/