what you don't know can hurt you

CMS Made Simple 1.10.3 Cross Site Scripting

CMS Made Simple 1.10.3 Cross Site Scripting
Posted Apr 2, 2012
Authored by Ivano Binetti

CMS Made Simple versions 1.10.3 and below suffer from a cross site scripting vulnerability.

tags | exploit, xss
advisories | CVE-2012-1992
MD5 | 55db3d9f7aee41782a04bb515bd31f5a

CMS Made Simple 1.10.3 Cross Site Scripting

Change Mirror Download
+---------------------------------------------------------------------------------------------------------------------------------+
# Exploit Title : CMS Made Simple <= 1.10.3 XSS Vulnerability
# Date : 02-04-2012
# Author : Ivano Binetti (http://ivanobinetti.com)
# Vendor site : http://www.cmsmadesimple.org/
# Software link : http://s3.amazonaws.com/cmsms/downloads/8886/cmsmadesimple-1.10.3-full.tar.gz
# Version : 1.10.3 and lower
# Tested on : Debian Squeeze (6.0)
# Original Advisory : http://www.webapp-security.com/2012/04/cms-made-simple/
# CVE : CVE-2012-1992
+---------------------------------------------------------------------------------------------------------------------------------+
Summary
1)Introduction
2)Description
3)Exploit
+---------------------------------------------------------------------------------------------------------------------------------+
1)Introduction
CMS Made Simple is "an open source content management system, allows for faster and easier management of website content. This CMS
is scalable for small businesses to large corporations".

2)Description
CMS Made Simple 1.10.3 (and lower) is prone to a XSS vulnerability due to an improper input sanitization of "email" parameter,
passed to server side script "admin/edituser.php" via http POST method.

3)Exploit
Insert the following code in "Email Address" field within "Edit User" template:
<script>alert(document.cookie)</script>
+---------------------------------------------------------------------------------------------------------------------------------+

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

File Archive:

July 2017

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    2 Files
  • 2
    Jul 2nd
    3 Files
  • 3
    Jul 3rd
    15 Files
  • 4
    Jul 4th
    4 Files
  • 5
    Jul 5th
    15 Files
  • 6
    Jul 6th
    15 Files
  • 7
    Jul 7th
    10 Files
  • 8
    Jul 8th
    2 Files
  • 9
    Jul 9th
    10 Files
  • 10
    Jul 10th
    15 Files
  • 11
    Jul 11th
    15 Files
  • 12
    Jul 12th
    19 Files
  • 13
    Jul 13th
    16 Files
  • 14
    Jul 14th
    15 Files
  • 15
    Jul 15th
    3 Files
  • 16
    Jul 16th
    2 Files
  • 17
    Jul 17th
    8 Files
  • 18
    Jul 18th
    11 Files
  • 19
    Jul 19th
    15 Files
  • 20
    Jul 20th
    15 Files
  • 21
    Jul 21st
    15 Files
  • 22
    Jul 22nd
    7 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2016 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close