phpVibe Stored Cross Site Scripting

🗓️ 16 Jul 2015 00:00:00Reported by Filippos MastrogiannisType

packetstorm🔗 packetstormsecurity.com👁 16 Views

phpVibe Stored XSS vulnerability prior to version 4.20 allows logged in users to inject malicious code in comments leading to code execution on the target’s browser. Fixed in version 4.2

`# phpVibe < 4.20 Stored XSS  
  
# Vendor Homepage: http://www.phpvibe.com  
# Affected Versions: prior to 4.20  
  
# Discovered by Filippos Mastrogiannis  
# Twitter: @filipposmastro  
# LinkedIn: https://www.linkedin.com/pub/filippos-mastrogiannis/68/132/177  
  
-- Description --  
  
This stored XSS vulnerability allows any logged in user  
to inject malicious code in the comments section:  
e.g. "><body onLoad=confirm("XSS")>  
  
The vulnerability exists because the user input is not properly sanitized  
and this can lead to malicious code injection that will be executed on the  
target’s browser  
  
-- Proof of Concept --  
  
1. The attacker posts a new comment which contains our payload:  
"><body onLoad=confirm("XSS")>  
  
2. The stored XSS can be triggered when any user visits the link of the  
uploaded content  
  
-- Solution --  
  
The vendor has fixed the issue in the version 4.21  
`

16 Jul 2015 00:00Current

7.4High risk

Vulners AI Score7.4