Elkapax CMS suffers from a cross site scripting vulnerability.
27f48dc7443a45f6e3ee8c17a6f22e2ce75dd507670a9d61966d0c7d943b2094
================= IUT-CERT =================
Title: Elkapax CMS Multiple Vulnerabilities
Vendor: www.elkapax.com
Type: Input.Validation.Vulnerability (Cross Site Scripting)
Fix: N/A
================== nsec.ir =================
Description:
------------------
Elkapax is a CMS producer in Iran. Search page in Elkapax CMS
product are vulnerable to XSS vulnerability.
Vulnerability Variant:
------------------
Cross Site Scripting vulnerability in Search page in "q" parameter.
http://example.com/?q=<script>alert(123)</script>&mode=2
Solution:
------------------
Input validation of Parameter "q" should be corrected.
Credit:
------------------
Isfahan University of Technology - Computer Emergency Response Team
Thanks to : N. Fathi, E. Jafari, M. R. Faghani