clientResponse Client Management XSS Vulnerability

vendor:

clientResponse Client Management

by:

Halil Dalabasmaz

3,3

CVSS

MEDIUM

Stored XSS

CWE

Product Name: clientResponse Client Management

Affected Version From: v4.1

Affected Version To: v4.1

Patch Exists: NO

Related CWE: N/A

CPE: codecanyon.net/item/clientresponse-responsive-php-client-management/3797780

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Chrome & Iceweasel

2014

clientResponse Client Management XSS Vulnerability

The message system of script is not secure. You can run XSS payloads on 'Subject' and 'Message' inputs. If you use 'Subject' input for attack and send the message to admin when admin login the system it will be directly affect by vulnerability. Also profile section inputs are vulnerable.

Mitigation:

Filter the input fields against to XSS attacks.

Source

Exploit-DB raw data:

# Exploit Title: clientResponse Client Management XSS Vulnerability
# Date: 14-10-2014
# Exploit Author: Halil Dalabasmaz
# Version: v4.1
# Vendor Homepage:
http://codecanyon.net/item/clientresponse-responsive-php-client-management/3797780
# Tested on: Chrome & Iceweasel

# Vulnerability Description:

===Stored XSS===
The message system of script is not secure. You can run XSS payloads on
"Subject" and "Message" inputs. If you use "Subject" input for attack and
send the message to admin when admin login the system it will be directly
affect by vulnerability. Also profile section inputs are vulnerable.

Sample Payload for Stored XSS: "><script>alert(document.cookie);</script>

=Solution=
Filter the input fields against to XSS attacks.
================