vendor:
CMS Buzz
by:
ThE g0bL!N
8,8
CVSS
HIGH
Cross-Site Scripting (XSS) & HTML Injection & Cookie Grabber Exploit
79 (XSS) & 89 (HTML Injection) & 522 (Cookie Grabber Exploit)
CWE
Product Name: CMS Buzz
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
CMS Buzz (xss/Change Password)Multiple Remote Vulnerabilities & Cookie Grabber Exploit & HTML Injection
A vulnerability in CMS Buzz allows an attacker to change the password of any user by accessing the profile page of the user. An attacker can also inject malicious JavaScript code into the search page of the website, which will be executed when a user visits the page. Additionally, an attacker can create two files, cookie.php and log.txt, and upload them to a web server. The cookie.php file contains code to grab the cookie of the user when they visit the page, and the log.txt file is used to store the cookie. The attacker can then send a message to the admin of the website with a malicious JavaScript code that will redirect the admin to the cookie.php page, thus allowing the attacker to grab the admin's cookie.
Mitigation:
To mitigate XSS, the application should validate all user input and encode output. To mitigate HTML injection, the application should validate all user input and encode output. To mitigate cookie grabber exploit, the application should use secure cookies and ensure that the cookie is only sent over HTTPS.
