menu arrow_back 湛蓝安全空间 |狂野湛蓝，暴躁每天 chevron_right All_wiki chevron_right Vulnerability-棱角社区(Vulnerability)项目漏洞-20210715 chevron_right CVE-2020-29133 Coremail 存储型XSS.md
  • home 首页
  • brightness_4 暗黑模式
    • cloud
    xLIYhHS7e34ez7Ma
    cloud
    湛蓝安全
    code
    Github
    CVE-2020-29133 Coremail 存储型XSS.md
    290 B / 2021-05-21 09:14:38
        # CVE-2020-29133 Coremail 存储型XSS

PoC：

```
coremail/XT5/jsp/upload.jsp  上传 1.jpg.html
```

获取对应的hashId获取到对应的地址

![](media/16097298915254/16097299115036.jpg)


![](media/16097298915254/16097299156243.jpg)


![](media/16097298915254/16097299193319.jpg)
    links
    file_download