mayaseven / cve-2019-12562 Goto Github PK

View Code? Open in Web Editor NEW

8.0 8.0 4.0 4 KB

Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 | XSS to RCE

Python 100.00%

cve-2019-12562's People

Contributors

Stargazers

Watchers

Forkers

akegvd 5l1v3r1 3453-315h kobbycyber

cve-2019-12562's Issues

KeyError: 'Username'

Hello when I run this script I always get this error:

Traceback (most recent call last):
File "dnn.py", line 151, in
main()
File "dnn.py", line 138, in main
if(exploit()):
File "dnn.py", line 115, in exploit
param['Username']: "dummy_"+USERNAME, param["Password"]: PASSWORD, param["PasswordConfirm"]: PASSWORD, param["DisplayName"]: PAYLOAD, "dummy_"+param["Email"]: EMAIL, '__ASYNCPOST': 'true'}
KeyError: 'Username'

KeyError: 'aria-label'

Hello. When I run this script i'm getting an error.

[ Checking the target ]
 [+] Target is DNN website.
 [+] URL: XXXXXXXXXXX
[ Running an exploit ]
 [+] Fetching DNN random parameter name.
Traceback (most recent call last):
  File "CVE-2019-12562.py", line 151, in <module>
    main()
  File "CVE-2019-12562.py", line 138, in main
    if(exploit()):
  File "CVE-2019-12562.py", line 105, in exploit
    print(" [+]", i["aria-label"],":", i["name"])
  File "/usr/lib/python3/dist-packages/bs4/element.py", line 1321, in __getitem__
    return self.attrs[key]
KeyError: 'aria-label'

Recommend Projects