DBHcms 1.1.4 Stored XSS

vendor:

DBHcms

by:

ITSecTeam

7,5

CVSS

HIGH

Stored XSS

CWE

Product Name: DBHcms

Affected Version From: 1.1.4

Affected Version To: 1.1.4

Patch Exists: YES

Related CWE: N/A

CPE: a:drbenhur:dbhcms:1.1.4

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

The DBHcms is a small free Open Source content management system for personal and small business websites. Stored XSS can be exploited by posting any script as name in the guestbook. Non-persistent XSS can be exploited by querying the string '><script>alert(1)</script>' in the search.

Mitigation:

Input validation should be used to prevent malicious scripts from being stored in the database.

Source

Exploit-DB raw data:

############################################################################
#Title: DBHcms 1.1.4 Stored XSS #
#Vendor: http://www.drbenhur.com #
#Dork: "powered by DBHcms" #
############################################################################
#AUTHOR: ITSecTeam #
#Email: Bug@ITSecTeam.com #
#Website: http://www.itsecteam.com #
#Forum : http://forum.ITSecTeam.com #
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability50.htm
#Thanks: r3dm0v3 [r3dm0v3_at_ymail.com], Pejvak, am!rkh@n #
############################################################################

#DESCRIPTION (by vendor):###################################################
The DBHcms is a small free Open Source content management system for
personal and small business websites.`

#Stored XSS
POC:########################################################################
goto guestbook and post any script as name!


#Non-persistent XSS
POC:###################################################################
goto search and query this string: "><script>alert(1)</script>