LanSweeper 6.0.100.75 - Cross-Site Scripting

🗓️ 16 Nov 2017 00:00:00Reported by Miguel Mendez ZType

LanSweeper 6.0.100.75 XSS via "/Calendar/CalendarActions.aspx

Reporter	Title	Published	Views	Family All 7
0day.today	LanSweeper 6.0.100.75 - Cross-Site Scripting Vulnerability	16 Nov 201700:00	–	zdt
CVE	CVE-2017-16841	16 Nov 201703:00	–	cve
Cvelist	CVE-2017-16841	16 Nov 201703:00	–	cvelist
EUVD	EUVD-2017-8015	7 Oct 202500:30	–	euvd
exploitpack	LanSweeper 6.0.100.75 - Cross-Site Scripting	16 Nov 201700:00	–	exploitpack
NVD	CVE-2017-16841	16 Nov 201703:29	–	nvd
Prion	Design/Logic Flaw	16 Nov 201703:29	–	prion

LanSweeper - Cross Site Scripting and HTMLi

Title: Vulnerability in LanSweeper
Date: 16-11-2017
Status: Vendor contacted, patch available
Author: Miguel Mendez Z
Vendor Homepage: http://www.lansweeper.com
Version: 6.0.100.75
CVE: CVE-2017-16841

Vulnerability description -------------------------

LanSweeper 6.0.100.75 has XSS via the description parameter to "/Calendar/CalendarActions.aspx".
Take control of the browser using the xss shell or perform malware attacks on users.

Vulnerable variable:
--------------------

"http://victim.com/Calendar/CalendarActions.aspx?action=scheduleinfo&id=2&__VIEWSTATE=&title=Test+Lansweeper&description=XSS/HTMLI&type=1&startdate=13/10/2017&txtStart=19:30&enddate=13/10/2017&txtEnd=21:30&reminder=15&repeattype=1&amount=1&repeatby=0&monthday=1&monthweekday=1&monthweekdayday=1&ends=1&occurrences=15&repeatenddate=&agents={"14":{"id":14,"editAllowed":true}}&teams=&delete=false"

"http://victim.com/Scanning/report.aspx?det=web50accessdeniederrors&title=XSS/HTMLI"

"http://victim.com/Software/report.aspx?det=XSS/HTMLI&title=Linux Software"


Poc:
----
https://www.youtube.com/watch?v=u213EqTSsXQ

16 Nov 2017 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 36.1

EPSS0.00305