.. / CVE-2023-36306

Exploit for Adiscon LogAnalyzer v.4.1.13 - Cross-Site Scripting (CVE-2023-36306)

Description:

A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle.php

Nuclei Template

View the template here CVE-2023-36306.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-36306.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2023-36306
https://www.exploit-db.com/exploits/51643