.. / CVE-2024-25669

• XSS
• Nuclei
• Web

Exploit for CaseAware a360inc - Cross-Site Scripting (CVE-2024-25669)

Description:

a360inc CaseAware contains a reflected cross-site scripting vulnerability via the user parameter transmitted in the login.php query string. This is a bypass of the fix reported in CVE-2017->

Nuclei Template

View the template here CVE-2024-25669.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2024/CVE-2024-25669.yaml

References: