Cross-site Scripting (XSS) Vulnerabilities in Zimplit CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Zimplit CMS which could be exploited to perform cross-site scripting attacks.

1. Cross-site scripting (XSS) vulnerabilities in Zimplit CMS: CVE-2010-4513
   1.1 The vulnerability exists due to input sanitation error in the “file” parameter in zimplit.php when “action” is set to “load”. A remote attacker can send a specially crafted HTTP request to the vulnerable script and execute arbitrary HTML and script code in users browser in context of the vulnerable website. Exploitation example: http://host/path/zimplit.php?action=load&file=%3Cscript%3Ealert%28document.c ookie%29%3C/script%3E 1.2 The vulnerability exists due to input sanitation error in the "client" parameter in English_manual_version_2.php. A remote attacker can send a specially crafted HTTP request to the vulnerable script and execute arbitrary HTML and script code in users browser in context of the vulnerable website.
   Exploitation example:
   http://host/path/English_manual_version_2.php?client=c’"><script>a lert%28document.cookie%2 9%3C/script%3E