Enano CMS 1.1.8pl1 Cross Site Scripting

2015.02.27
Credit: Dennis Veninga
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79
Dork: \"Website engine powered by Enano\"

# Exploit Title: EnanoCMS 1.1.8pl1 XSS Vulnerability # Google Dork: "Website engine powered by Enano" # Date: 24-2-2015 # Exploit Author: Dennis Veninga # Vendor Homepage: http://enanocms.org # Version: 1.1.8pl1 # Tested on: Firefox 36 & Chrome 38 / W8.1-x64 XSS Vulnerability in comments: http://{target}/enanocms/index.php/Main_Page?do=comments


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top