starCMS Cross Site Scripting

2012-03-02 / 2012-09-20
Credit: Am!r
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2012-4998
CWE: CWE-79
Dork: powered by starCMS


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

####################################################################################### # # # Exploit Title : starCMS Cross-Site Scripting Vulnerabilitiy # # # # Author : Zarbat.Org & IrIsT.Ir # # # # Discovered By : Am!r # # # # Home : http://Zarbat.Org/forums/ # # # # Software Link : http://www.starcms.net/ # # # # Security Risk : High # # # # Version : All Version # # # # Tested on : GNU/Linux Ubuntu - Windows Server - win7 # # # # Dork : "powered by starCMS" # # # ####################################################################################### # # # Expl0iTs : # # # # [TarGeT]/index.php?q=[Xss]&r=5&lang=de&actionsuche=yes # # # ####################################################################################### # # # Demo: # # # # changestrategy.eu/index.php?q=[Xss]&r=5&lang=de&actionsuche=yes # # # # forumfinanzplaner.at/index.php?q=[Xss]&r=5&actionsuche=yes # # # ####################################################################################### # # # Greats : Aria-Security.Com - datacoders.org - black-hg.org - Ashiyane.Org # # # # Security7.ir & And All Iranian Hackers # # # #######################################################################################

References:

http://Zarbat.Org/forums/
http://www.starcms.net/


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top