Online Subtitles Workshop Cross Site Scripting

2011-10-29 / 2012-09-21
Credit: M.Jock3R
Risk: Low
Local: No
Remote: Yes
CWE: CWE-79


Ogólna skala CVSS: 4.3/10
Znaczenie: 2.9/10
Łatwość wykorzystania: 8.6/10
Wymagany dostęp: Zdalny
Złożoność ataku: Średnia
Autoryzacja: Nie wymagana
Wpływ na poufność: Brak
Wpływ na integralność: Częściowy
Wpływ na dostępność: Brak

=================================================================================== Online Subtitles Workshop XSS vulnerabilities =================================================================================== # Exploit Title: Online Subtitles Workshop XSS vulnerabilities # Author: M.Jock3R (www.the-code.tk) # Script Download: http://sourceforge.net/projects/onlinesubtitles/files/ # Category:: webapps # Tested on: windows XP Sp2 FR =================================================================================== Vuln file: video_comments.php Vuln code: --------- $all_comments = read_video_comments($video_id); //print_r($all_comments); $video_comments = ""; for ($i = 0; $i <= count($all_comments)-1; $i++) { $video_comments = $video_comments . " <table style='width:100%'> <tr> <td style='width:100%'> ".get_user_name($all_comments[$i]['id'])." </td> <td> ".date('h:i:s A m-d-Y ', $all_comments[$i]['time'])." </td> </tr> <tr> <td colspan='7'> ".$all_comments[$i]['message']." <== Here you can inject any HTML or Javascript code :) </td> </tr> </table> <br> "; Exploit: --------- First,Choose any video. Go to comments, and write for example : <marquee><font color=red size=15>M.jock3r</font>/marquee> -Or you can steal the cookies of any one browse the video page :) =================================================================================== Greets To : the C0de team / sa-hacker.com Email : madrido.jocker@gmail.com THANKS TO ALL ALGERIANS HACK3RS ===================================================================================


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top