Stored XSS in PHP Server Monitor

vendor:

PHP Server Monitor

by:

loneferret

8,8

CVSS

HIGH

Stored XSS

CWE

Product Name: PHP Server Monitor

Affected Version From: 2.0.1

Affected Version To: 2.0.1

Patch Exists: NO

Related CWE: N/A

CPE: 2.0.1

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Ubuntu Linux

2020

Stored XSS in PHP Server Monitor

PHP Server Monitor is vulnerable to stored XSS. On the 'Add server' page, when inserting HTML code into the Label name or IP field, it can cause the whole page to be corrupted. An attacker can use this vulnerability to execute malicious JavaScript code, such as alerting the user's cookie information.

Mitigation:

Input validation should be used to prevent malicious code from being inserted into the Label name or IP field.

Source

Exploit-DB raw data:

# Author: loneferret of Offensive Security
# Product: PHP Server Monitor
# Version: 2.0.1 (and maybe older versions)
# Google Dork: intext="Powered by PHP Server Monitor v2.0.1"
# (yes people have made this available on the web)

# Software Download: http://sourceforge.net/projects/phpservermon/
 
# Tested on: Ubuntu Linux

# Software Description
# PHP Server Monitor is a script that checks whether the servers on your list are up and running on the selected ports.
# It comes with a web based user interface where you can add and remove servers or websites from the MySQL database,
# and you can manage users for each server with a mobile number and email address.
# On the "Add server" page, you can choose
# whether it's a "service" or a "website":

# Vulnerability: Stored XSS
# Label name or pretty much any other text field such as IP
# Inserting html code can pretty much screw up the whole page as well.
# PoC: 
# <script>alert('xss');</script>
# <script>alert(document.cookie);</script>
# <iframe>something</iframe>
# 

# There are other things I'm sure