Description
Computrols CBAS Web存在跨站脚本漏洞，此漏洞是由于应用程序对username参数数据没有进行充分验证导致的。
Computrols CBAS Web CVE-2019-10846 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.i-monero.com/down/www.0-sec.org/0day/Computrols%20CBAS%20Web/1.html
https://www.exploit-db.com/exploits/47614
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Computrols%20CBAS%20Web/%EF%BC%88CVE-2019-10846%EF%BC%89Computrols%20CBAS%20Web%E5%8F%8D%E5%B0%84%E5%9E%8Bxss/
https://devhub.checkmarx.com/cve-details/cve-2019-10846/
https://scanrepeat.com/vulnerability-database/computrols-building-automation-system-cross-site-scripting
https://www.isssource.com/computrols-clears-cbas-web-holes/
https://cve.komodosec.com/cve-list?search=&cvss_score_range=6&year=&has_exploit=&results_per_page=15&sort=publish_date&order=descending&page_number=8593
https://docs.prophaze.com/cve/cve-2019
https://securityvulnerability.io/vendor/computrols
https://github.com/SexyBeast233/SecBooks
https://ares-x.com/wiki/
http://wiki.ms08067.com:5244/SecurityBooks/%E9%9B%B6%E7%BB%84%E6%96%87%E5%BA%93/Web%E5%AE%89%E5%85%A8/Computrols%20CBAS%20Web/%EF%BC%88CVE-2019-10846%EF%BC%89Computrols%20CBAS%20Web%E5%8F%8D%E5%B0%84%E5%9E%8Bxss.docx