Enano CMS 1.1.8pl1 Cross Site Scripting

2015.02.27
Credit: Dennis Veninga
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79
Dork: \"Website engine powered by Enano\"

# Exploit Title: EnanoCMS 1.1.8pl1 XSS Vulnerability # Google Dork: "Website engine powered by Enano" # Date: 24-2-2015 # Exploit Author: Dennis Veninga # Vendor Homepage: http://enanocms.org # Version: 1.1.8pl1 # Tested on: Firefox 36 & Chrome 38 / W8.1-x64 XSS Vulnerability in comments: http://{target}/enanocms/index.php/Main_Page?do=comments


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top