DBHcms 1.1.4 Stored XSS

2010.05.04

Credit: ITSecTeam

Risk: Low

Local: No

Remote: Yes

CVE: N/A

CWE: CWE-79

Dork: \"powered by DBHcms\"

############################################################################
#Title: DBHcms 1.1.4 Stored XSS #
#Vendor: http://www.drbenhur.com #
#Dork: "powered by DBHcms" #
############################################################################
#AUTHOR: ITSecTeam #
#Email: Bug@ITSecTeam.com #
#Website: http://www.itsecteam.com #
#Forum : http://forum.ITSecTeam.com #
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability50.htm
#Thanks: r3dm0v3 [r3dm0v3_at_ymail.com], Pejvak, am!rkh@n #
############################################################################
#DESCRIPTION (by vendor):###################################################
The DBHcms is a small free Open Source content management system for
personal and small business websites.`
#Stored XSS
POC:########################################################################
goto guestbook and post any script as name!
#Non-persistent XSS
POC:###################################################################
goto search and query this string: "><script>alert(1)</script>

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

DBHcms 1.1.4 Stored XSS

Dork: \"powered by DBHcms\"

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.