{"vulnerability": "CVE-2021-31682", "sightings": [{"uuid": "8d84f21a-1ce2-4323-a7e9-ed545a511920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31682", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31682.yaml", "content": "", "creation_timestamp": "2023-04-27T09:58:59.000000Z"}, {"uuid": "cd24c781-943e-4586-83ba-0ad1793314a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31682", "type": "seen", "source": "https://t.me/cibsecurity/31022", "content": "\u203c CVE-2021-31682 \u203c\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-22T16:39:20.000000Z"}, {"uuid": "1558238f-bdcd-48eb-8dbb-8bfeb7041e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31682", "type": "seen", "source": "https://t.me/hacking_Attack/29529", "content": "Exploit Collector\nWebCTRL OEM 6.5 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-v3K-Hxbn0Es/WWlvhvX1clI/AAAAAAAAIQY/UsJ0X_N1RWgdGsUiiIhYa-pG6QWPEsSmwCLcBGAs/s1600/h91.png \nWebCTRL OEM version 6.5 suffers from a cross site scripting vulnerability.\n\nMD5 | ac56809d778f5779efeadfa3fa8e7c1d\n\nDownload\n# Exploit Title: WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS)\n# Date: 4/07/2021\n# Exploit Author: 3ndG4me\n# Vendor Homepage: https://www.automatedlogic.com/en/products/webctrl-building-automation-system/\n# Version: 6.5 and Below\n# CVE : CVE-2021-31682\n\n--Summary--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. \n\nAutomated Logic\nhttps://www.automatedlogic.com/en/products-services/webctrl-building-automation-system/\n\n--Affects--\n\n- WebCTRL OEM\n- Versions 6.5 and prior\n\n--Details--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization. This can allow for several issues including but not limited to:\n\n- Hijacking a user's session\n- Using XSS payloads to capture input (keylogging)\n-- Proof of Concept --\nThe following URL parameter was impacted and can be exploited with the sample payload provided below:\n- https://example.com/index.jsp?operatorlocale=en/> \n\n--Mitigation--\n\nSanitize any user controlled input in both form fields and URL parameters to properly encode data so it is not rendered as arbitrary HTML/JavaScript.\n\n--Timeline--\n\n- 4/07/2021: XSS Vulnerability was discovered and documented. \n- 4/17/2021: A temporary CVE identifier was requested by MITRE. Automated Logic was also notified with the full details of each finding via their product security contact at https://www.automatedlogic.com/en/about/security-commitment/. A baseline 90 day disclosure timeline was established in the initial communication.\n- 7/23/2021: MITRE Assigns CVE ID CVE-2021-31682 to the vulnerability.\n- 9/08/2021: Automated Logic formally responds requesting the CVE identifier and states that the issue should be patched in newer versions of the product.\n- 10/20/2021: The researcher responds with the CVE identifier and a request for all impacted version numbers so they can release a more accurate impacted list of products when full disclosure occurs. Automate Logic responds with a list of impacted versions the same day, and the researcher publicly discloses the issue and submits a CVE details update request to MTIRE.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:11.977433Z"}, {"uuid": "8af06539-8b57-4a69-9dca-5e83b9b954d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31682", "type": "seen", "source": "https://t.me/hacking_Attack/29529", "content": "Exploit Collector\nWebCTRL OEM 6.5 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-v3K-Hxbn0Es/WWlvhvX1clI/AAAAAAAAIQY/UsJ0X_N1RWgdGsUiiIhYa-pG6QWPEsSmwCLcBGAs/s1600/h91.png \nWebCTRL OEM version 6.5 suffers from a cross site scripting vulnerability.\n\nMD5 | ac56809d778f5779efeadfa3fa8e7c1d\n\nDownload\n# Exploit Title: WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS)\n# Date: 4/07/2021\n# Exploit Author: 3ndG4me\n# Vendor Homepage: https://www.automatedlogic.com/en/products/webctrl-building-automation-system/\n# Version: 6.5 and Below\n# CVE : CVE-2021-31682\n\n--Summary--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. \n\nAutomated Logic\nhttps://www.automatedlogic.com/en/products-services/webctrl-building-automation-system/\n\n--Affects--\n\n- WebCTRL OEM\n- Versions 6.5 and prior\n\n--Details--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization. This can allow for several issues including but not limited to:\n\n- Hijacking a user's session\n- Using XSS payloads to capture input (keylogging)\n-- Proof of Concept --\nThe following URL parameter was impacted and can be exploited with the sample payload provided below:\n- https://example.com/index.jsp?operatorlocale=en/> \n\n--Mitigation--\n\nSanitize any user controlled input in both form fields and URL parameters to properly encode data so it is not rendered as arbitrary HTML/JavaScript.\n\n--Timeline--\n\n- 4/07/2021: XSS Vulnerability was discovered and documented. \n- 4/17/2021: A temporary CVE identifier was requested by MITRE. Automated Logic was also notified with the full details of each finding via their product security contact at https://www.automatedlogic.com/en/about/security-commitment/. A baseline 90 day disclosure timeline was established in the initial communication.\n- 7/23/2021: MITRE Assigns CVE ID CVE-2021-31682 to the vulnerability.\n- 9/08/2021: Automated Logic formally responds requesting the CVE identifier and states that the issue should be patched in newer versions of the product.\n- 10/20/2021: The researcher responds with the CVE identifier and a request for all impacted version numbers so they can release a more accurate impacted list of products when full disclosure occurs. Automate Logic responds with a list of impacted versions the same day, and the researcher publicly discloses the issue and submits a CVE details update request to MTIRE.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:37.557129Z"}, {"uuid": "0013e8af-03e5-48b4-b0bb-0447a64e72f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31682", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/29529", "content": "Exploit Collector\nWebCTRL OEM 6.5 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-v3K-Hxbn0Es/WWlvhvX1clI/AAAAAAAAIQY/UsJ0X_N1RWgdGsUiiIhYa-pG6QWPEsSmwCLcBGAs/s1600/h91.png \nWebCTRL OEM version 6.5 suffers from a cross site scripting vulnerability.\n\nMD5 | ac56809d778f5779efeadfa3fa8e7c1d\n\nDownload\n# Exploit Title: WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS)\n# Date: 4/07/2021\n# Exploit Author: 3ndG4me\n# Vendor Homepage: https://www.automatedlogic.com/en/products/webctrl-building-automation-system/\n# Version: 6.5 and Below\n# CVE : CVE-2021-31682\n\n--Summary--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. \n\nAutomated Logic\nhttps://www.automatedlogic.com/en/products-services/webctrl-building-automation-system/\n\n--Affects--\n\n- WebCTRL OEM\n- Versions 6.5 and prior\n\n--Details--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization. This can allow for several issues including but not limited to:\n\n- Hijacking a user's session\n- Using XSS payloads to capture input (keylogging)\n-- Proof of Concept --\nThe following URL parameter was impacted and can be exploited with the sample payload provided below:\n- https://example.com/index.jsp?operatorlocale=en/> \n\n--Mitigation--\n\nSanitize any user controlled input in both form fields and URL parameters to properly encode data so it is not rendered as arbitrary HTML/JavaScript.\n\n--Timeline--\n\n- 4/07/2021: XSS Vulnerability was discovered and documented. \n- 4/17/2021: A temporary CVE identifier was requested by MITRE. Automated Logic was also notified with the full details of each finding via their product security contact at https://www.automatedlogic.com/en/about/security-commitment/. A baseline 90 day disclosure timeline was established in the initial communication.\n- 7/23/2021: MITRE Assigns CVE ID CVE-2021-31682 to the vulnerability.\n- 9/08/2021: Automated Logic formally responds requesting the CVE identifier and states that the issue should be patched in newer versions of the product.\n- 10/20/2021: The researcher responds with the CVE identifier and a request for all impacted version numbers so they can release a more accurate impacted list of products when full disclosure occurs. Automate Logic responds with a list of impacted versions the same day, and the researcher publicly discloses the issue and submits a CVE details update request to MTIRE.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T06:00:04.790750Z"}, {"uuid": "0aebc7ad-0bef-458d-9d73-32a129e976a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31682", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/29529", "content": "Exploit Collector\nWebCTRL OEM 6.5 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-v3K-Hxbn0Es/WWlvhvX1clI/AAAAAAAAIQY/UsJ0X_N1RWgdGsUiiIhYa-pG6QWPEsSmwCLcBGAs/s1600/h91.png \nWebCTRL OEM version 6.5 suffers from a cross site scripting vulnerability.\n\nMD5 | ac56809d778f5779efeadfa3fa8e7c1d\n\nDownload\n# Exploit Title: WebCTRL OEM 6.5 - 'locale' Reflected Cross-Site Scripting (XSS)\n# Date: 4/07/2021\n# Exploit Author: 3ndG4me\n# Vendor Homepage: https://www.automatedlogic.com/en/products/webctrl-building-automation-system/\n# Version: 6.5 and Below\n# CVE : CVE-2021-31682\n\n--Summary--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. \n\nAutomated Logic\nhttps://www.automatedlogic.com/en/products-services/webctrl-building-automation-system/\n\n--Affects--\n\n- WebCTRL OEM\n- Versions 6.5 and prior\n\n--Details--\n\nThe login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization. This can allow for several issues including but not limited to:\n\n- Hijacking a user's session\n- Using XSS payloads to capture input (keylogging)\n-- Proof of Concept --\nThe following URL parameter was impacted and can be exploited with the sample payload provided below:\n- https://example.com/index.jsp?operatorlocale=en/> \n\n--Mitigation--\n\nSanitize any user controlled input in both form fields and URL parameters to properly encode data so it is not rendered as arbitrary HTML/JavaScript.\n\n--Timeline--\n\n- 4/07/2021: XSS Vulnerability was discovered and documented. \n- 4/17/2021: A temporary CVE identifier was requested by MITRE. Automated Logic was also notified with the full details of each finding via their product security contact at https://www.automatedlogic.com/en/about/security-commitment/. A baseline 90 day disclosure timeline was established in the initial communication.\n- 7/23/2021: MITRE Assigns CVE ID CVE-2021-31682 to the vulnerability.\n- 9/08/2021: Automated Logic formally responds requesting the CVE identifier and states that the issue should be patched in newer versions of the product.\n- 10/20/2021: The researcher responds with the CVE identifier and a request for all impacted version numbers so they can release a more accurate impacted list of products when full disclosure occurs. Automate Logic responds with a list of impacted versions the same day, and the researcher publicly discloses the issue and submits a CVE details update request to MTIRE.\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:56.794164Z"}]}