Fire Soft Board 2.0.1 – Persistent Cross-Site Scripting (Admin Panel)

• Exploit Database
• 112 阅读

• 作者： _jill for A-S
  日期： 2011-07-12
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17522/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

  # Exploit Title: Fire Soft Board <= 2.0.1 Persistent XSS Vulnerability (admin panel) # Date: 2011-07-11 # Author: _jill for A-S # Software Link: http://www.fire-soft-board.com/index.php?p=download&mode=cat&id=2 # Version: 2.0.1   There is a vulnerability on Fire Soft Board forums due to a non-sanitization of the $_SERVER[&apos;HTTP_USER_AGENT&apos;] variable from every client (even visitors) of the site. This variable is printed as a span title in the admin panel overview witch can lead to a session hijack or bEEf exec or whatever you want.   PoC : - modify your user agent by something like : "><script>alert(document.cookie)</script><span title=" - go to any page of the forum - login into your admin panel -> popup with your cookies :-)   Fix : upgrade to last release (2.0.2)   -= Greatz to x =-