XSS via SVG Image Upload - AlegroCartv1.2.9

Posted by Andrey Stoykov on Apr 23# Exploit Title: XSS via SVG Image Upload - alegrocartv1.2.9 # Date: 04/2025 # Exploit Author: Andrey Stoykov # Version: 1.2.9 # Tested on: Debian 12 # Blog: https://msecureltd.blogspot.com/ XSS via SVG Image Upload: Steps to Reproduce: 1. Visit http://192.168.58.129/alegrocart/administrator/?controller=download 2. Upload SVG image file with the contents below 3. Intercept the POST request and change the Content-Type to "Content-Type:...

Related Posts

[webapps] Jasmin Ransomware - SQL Injection Login Bypass

ThreatWatcher Mar 22, 2025  0  13

[remote] OpenSSH server (sshd) 9.8p1 - Race Condition

ThreatWatcher Apr 22, 2025  0  6

APPLE-SA-03-31-2025-8 macOS Sonoma 14.7.5

ThreatWatcher Apr 3, 2025  0  4

Comments

Name

Email

Comment

Post Comment