phpCMS Cross-Site Scripting Vulnerability

vendor:

phpCMS

by:

Unknown

5.5

CVSS

MEDIUM

Cross-Site Scripting (XSS)

CWE

Product Name: phpCMS

Affected Version From: Versions prior to 1.2.1pl1

Affected Version To:

Patch Exists: YES

Related CWE:

CPE: a:phpcms:phpcms:1.2.1pl1

Metasploit:

Other Scripts:

Platforms Tested:

Unknown

phpCMS Cross-Site Scripting Vulnerability

phpCMS is susceptible to a cross-site scripting vulnerability. This issue occurs when the application fails to properly sanitize user-supplied input before including it in dynamically generated web pages. An attacker can create a malicious URI link with hostile HTML and script code, which, if followed, can render the code in the victim user's web browser. This can lead to theft of cookie-based authentication credentials or other attacks.

Mitigation:

To mitigate this vulnerability, it is recommended to update to phpCMS version 1.2.1pl1 or later. Additionally, enabling both 'STEALTH' and 'STEALTH_SECURE' modes can provide an extra layer of protection.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/11765/info

It is reported that phpCMS is susceptible to a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web pages.

It is reported that in order for phpCMS to be vulnerable, it must be configured with one, or both of 'STEALTH', or 'STEALTH_SECURE' modes being disabled.

This issue could permit a remote attacker to create a malicious URI link that includes hostile HTML and script code. If this link were to be followed, the hostile code may be rendered in the web browser of the victim user. This would occur in the security context of the affected web site and may allow for theft of cookie-based authentication credentials or other attacks.

Versions prior to 1.2.1pl1 are reportedly affected by this issue.

http://www.example.com/parser/parser.php?file=<script>alert(document.cookie)</script>