Piwigo v13.7.0 – Stored Cross-Site Scripting (XSS) (Authenticated)

Exploit Database
135 阅读

作者： Okan Kurtulus

日期： 2023-07-06
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/51572/

#Exploit Title: Piwigo v13.7.0 - Stored Cross-Site Scripting (XSS) (Authenticated)

#Date: 25 June 2023

#Exploit Author: Okan Kurtulus

#Vendor Homepage: https://piwigo.org

#Version: 13.7.0

#Tested on: Ubuntu 22.04

#CVE : N/A

# Proof of Concept:

1– Install the system through the website and log in with any user authorized to upload photos.

2–Click "Add" under "Photos" from the left menu. The photo you want to upload is selected and uploaded.

3– Click on the uploaded photo and the photo editing screen opens. XSS payload is entered in the "Description" section on this screen. After saving the file, go to the homepage and open the page with the photo. The XSS payload appears to be triggered.

#Payload

<sCriPt>alert(1);</sCriPt>

last Exploits
Piwigo v13.7.0 – Stored Cross-Site Scripting (XSS) (Authenticated)的更多信息

Joomla! Component com_civicrm 4.2.2 – Remote Code Injection：
SpringSource (Multiple Products) – Multiple HTML Injection Vulnerabilities：
sirang web-based d-control – Multiple Vulnerabilities：
Symphony CMS 2.6.3 – Multiple SQL Injections：
Splunk Enterprise 7.2.3 – (Authenticated) Custom App Remote Code Execution：
WordPress Plugin KenBurner Slider – ‘admin-ajax.php’ Arbitrary File Download：
Simple College Website 1.0 – ‘full’ Stored Cross Site Scripting：
WordPress Plugin Really Simple Guest Post 1.0.6 – Local File Inclusion：