Document Title:
===============
RozBlog Weblog Service - Authentication Bypass / Cross Site Request
Forgery / Cross Site Scripting
References (Source):
====================
http://ehsansec.ir/advisories/rozblog-xsrf-xss-bypass.txt
Release Date:
=============
2016-02-23
Product & Service Introduction:
===============================
Roseblog is one of the most famous blogging services, it has many
special features that indicate you an interesting experience of
blogging.
Vulnerability Type:
=========================
Authentication Bypass
Cross Site Request Forgery
Cross Site Scripting
Vulnerability Details:
==============================
I discovered an authentication bypass(change Email) vulnerability and
a client-side cross site request forgery web
vulnerability and a cross site scripting vulnerability and in
RozBlog.com (Weblog Service).
Exploitation Technique:
=======================
Remote
Severity Level:
===============
Medium
Proof of Concept (PoC):
=======================
-- Cross Site Request Forgery & Authentication Bypass --
-- PoC 1 --
-- To edit the e-mail users must first enter the old password on other
page, but with this exploit no longer requires it and bypass that. --
Authentication Bypass - Csrf
-- PoC 2 --
XSS - Csrf
-- PoC 3 --
-- Cross Site Scripting --
-- For action attribute enter address of weblog or one of rozblog.com domains --
Cross Site Scripting
Author:
==================
Ehsan Hosseini
http://ehsansec.ir/
SPX tnx to:
===========
Bl4ck_mohajem
Alireza
Contact:
========
hehsan979@gmail.com
info@ehsansec.ir