Contexis CMS version 1.0 suffers from a cross site scripting vulnerability.
ab5e2108f93cfcf2603751d8a48b52da0ef3be80421319c493809fa7004539fb
CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss
Severity: Medium
Vendor: exis-ti.com
Versions Affected: 1.0
Description: The contexist has be found the reflected XSS Vulnerability if
use the photo gallery model someone can insert xss code at the url
executing javascript codes on the web.
Exploit:
GET /publicas/galeria-imagenes/Galeria-XXXXX.html?action=detail&image=<XSS
code>
Solution: update to Contexis 2.0 CMS
Credit: This issue was discovered by Juan Francisco Bolivar
es.linkedin.com/in/jfbolivar/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6239
--
Un saludo, Juan Francisco