Joomla! Component Kubik-Rubik Simple Image Gallery Extended (SIGE) 3.2.3 – Cross-Site Scripting

• Exploit Database
• 115 阅读

• 作者： Alwin Peppels
  日期： 2018-02-16
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/44104/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29

  # Exploit Title: Joomla! Component SIGE version <= 3.2.3 Cross-site Scripting # Date: 15-02-2018 # Software Link: https://downloads.kubik-rubik.de/joomla-extensions/plg_sige_v3.2.3.zip # Exploit Author: Alwin Peppels # Website: www.onvio.nl # CVE: CVE-2017-16356 # Category: webapps   1. Description Kubik-Rubik Simple Image Gallery Extended (SIGE) contains an XSS in the &apos;print.php&apos; file. Insufficient sanitization of the &apos;caption&apos; URL parameter allows injection of Javascript into the page. In versions <= 3.2.0 the &apos;name&apos; and &apos;img&apos; parameters are vulnerable as well. Google dork: inurl:plugin_sige/print.php   The version of the SIGE plugin can be determined with this file: [JOOMLA]/plugins/content/sige/sige.xml   2. Proof of Concept     [JOOMLA]/plugins/content/sige/plugin_sige/print.php?img=x&caption=<img%20src=x%20onerror=alert(%27XSS%27)>   3. Solution:   Update to version 3.3.0 https://downloads.kubik-rubik.de/joomla-extensions/plg_sige_v3.3.0.zip