i3geo 跨站脚本漏洞(CVE-2022-34094)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.cve.org/CVERecord?id=CVE-2022-34094
• https://avd.aliyun.com/detail?id=AVD-2022-34094
• https://www.nsfocus.net/vulndb/69263
• https://www.yisu.com/cve/32355.html
• https://avd.aquasec.com/nvd/2022/cve-2022-34094/
• https://cve.imfht.com/poc_detail/e5376468250049cbab8043a41ad1f07bd1ec2406
• https://s4e.io/tools/i3geo-xss-cve-2022-34094
• https://dbugs.ptsecurity.com/vulnerability/PT-2022-22004
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34094.yaml

Related Vulnerabilities

• PoCCVE-2022-32409: Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion
• PoCCVE-2022-34093: Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting
• PoCCVE-2022-34094: Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting
• i3Geo codemirror.php 文件 pagina 参数文件读取漏洞（CVE-2022-32409）
• i3geo文件codemirror.php任意文件下载(CVE-2022-32409)
• i3geo文件request_token.php存在XSS漏洞(CVE-2022-34094)
• i3geo文件access_token.php存在XSS漏洞(CVE-2022-34093)