Simpli Easy (AFC Simple) Newsletter

vendor:

Simpli Easy Newsletter

by:

p0deje

7,5

CVSS

HIGH

Cross-site Scripting, Information Leakage

79, 200

CWE

Product Name: Simpli Easy Newsletter

Affected Version From: 4.2

Affected Version To: 4.2

Patch Exists: NO

Related CWE: N/A

CPE: a:scubadivingcalculators:simpli_easy_newsletter

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2010

Simpli Easy (AFC Simple) Newsletter <= 4.2 XSS/Information Leakage

The application is vulnerable to Cross-site Scripting (XSS) via the 'do' parameter in the 'cp.php' script. An attacker can inject arbitrary JavaScript code into the application. Additionally, the application saves subscribed email addresses and correspondent IP addresses to plain text file el.txt, which can be accessed by an attacker.

Mitigation:

Input validation should be used to prevent XSS attacks. The application should not store sensitive information in plain text files.

Source

Exploit-DB raw data:

Simpli Easy (AFC Simple) Newsletter <= 4.2 XSS/Information Leakage

Date: 30.10.2010
Author: p0deje | http://p0deje.blogspot.com
Software Link: http://scubadivingcalculators.com/simpli-easy-newsletter.php
Version: <= 4.2
 
  1. Cross-site Scripting
       
    Vulnerable code:
      cp.php
      ----------------
      6:  <form name="txtlist" action="cp.php?do=<?=$_GET['do']?>"
method="post">
      
    Proof-of-concept:   
      http://www.example.com/cp.php?do="><script>alert(1)</script>
      
  2. Information Leakage
    
    By default, application saves subscribed email addresses and
    correspondent IP addresses to plain text file el.txt
    
    Proof-of-concept:
      http://www.example.com/el.txt