SAS Environment Manager 2.5 – ‘name’ Stored Cross-Site Scripting (XSS)

ByPR 24 
# Exploit Title: SAS Environment Manager 2.5 - 'name' Stored Cross-Site Scripting (XSS)
# Date: 24/06/2021
# Exploit Author: Luqman Hakim Zahari @ Saitamang
# Vendor Homepage: https://support.sas.com/en/software/environment-manager-support.html
# Version: 2.5
# Tested on: CentOS 7
# CVE : CVE-2021-35475

# Description #

SAS® Environment Manager 2.5 allows XSS through the Name field when creating/editing a server. The XSS will prompt when editing the Configuration Properties.

# Proof of Concept(PoC) # https://github.com/saitamang/CVE-2021-35475/blob/main/README.md

*Steps to Reproduce:*

[1.] Login to your system > On "Resource" tab > "Browse""
[2.] Choose a "Platform"
[3.] Click "Inventory" tab > Under "Servers" tab click "New..."
[4.] Under "General Properties" tab on "Name" field , enter the payload(below) > Filled up other information and click "Ok" button

payload : 

name=XSS"><marquee onstart=confirm('XSS')>@SAITAMANG

[5.] Successfully saved the payload page will shown
[6.] Then scroll down to bottom under "Configuration Properties" tab > click "Edit" button
[7.] Then the payload will be executed

Similar Posts

Hackers are implanting multiple backdoors at industrial targets in Japan – KK Hack Labs

Hackers are implanting multiple backdoors at industrial targets in Japan – KK Hack Labs

ByPR 24

Cybersecurity researchers on Tuesday disclosed details of a sophisticated campaign that deploys malicious backdoors for the purpose of exfiltrating information from a number of industry sectors located in Japan.Dubbed “A41APT” by Kaspersky researchers, the findings delve into a new slew of attacks undertaken by APT10 (aka Stone Panda or Cicada) using previously undocumented malware to deliver

Yearlong Phishing Campaign Targets Energy Firms

Yearlong Phishing Campaign Targets Energy Firms

ByPR 24

Business Email Compromise (BEC) , Cybercrime , Fraud Management & Cybercrime Oil and Gas Industry Yet Again a Victim of Agent Tesla Malware Rashmi Ramesh • July 10, 2021     A campaign that uses remote access Trojans and malware-as-a-service infrastructure for cyber espionage purposes has been targeting large international energy companies for at least…

Four Security Vulnerabilities Were Found In Microsoft Office

Four Security Vulnerabilities Were Found In Microsoft Office

ByPR 24

Four Security Vulnerabilities Were Found In Microsoft Office | IT Security News Android App Android App with push notifications Sponsors Endpoint Cybersecurity www.endpoint-cybersecurity.com – Consulting in building your security products– Employee awareness training– Security tests for applications and pentesting… and more. Daily Summary Categories CategoriesSelect Category(ISC)2 Blog  (323)(ISC)2 Blog infosec  (13)(ISC)² Blog  (370)2020-12-08 – Files for an ISC…

Pegasus Spyware: Spyware used to snoop on ministers, opposition, journalists, businessmen: Report | India News

Pegasus Spyware: Spyware used to snoop on ministers, opposition, journalists, businessmen: Report | India News

ByPR 24

NEW DELHI: Spyware Pegasus, which is sold by the NSO Group of Israel, may have been used to conduct surveillance on about 300 Indians, including two serving Cabinet ministers at the Centre, three opposition leaders, a Constitutional authority, government officials, scientists and about 40 journalists, according to French media nonprofit, Forbidden Stories, and Amnesty International….