Vulners
Lucene search
News247 News Magazine 1.0 Cross Site Scripting
🗓️ 15 Sep 2022 00:00:00Reported by Ravinder VermaType 
packetstorm🔗 packetstormsecurity.com👁 263 Views
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | News247 News Magazine 1.0 Cross Site Scripting Vulnerability | 16 Sep 202200:00 | – | zdt |
 | CVE-2021-41731 | 16 Sep 202220:29 | – | circl |
 | News247 跨站脚本漏洞 | 15 Sep 202200:00 | – | cnnvd |
 | CVE-2021-41731 | 16 Sep 202216:18 | – | cve |
 | CVE-2021-41731 | 16 Sep 202216:18 | – | cvelist |
 | EUVD-2021-28743 | 3 Oct 202520:07 | – | euvd |
 | CVE-2021-41731 | 16 Sep 202217:15 | – | nvd |
 | CVE-2021-41731 | 16 Sep 202217:15 | – | osv |
 | Cross site scripting | 16 Sep 202217:15 | – | prion |
 | CVE-2021-41731 | 9 Jan 202611:36 | – | redhatcve |
10
`# Exploit Title: News247 - News Magazine (CMS) v1.0 – Stored Cross Site Scripting (XSS)
# Exploit Author: Ravinder Verma
# Date: Septmeber 14, 2022
# Vendor Homepage: https://www.sourcecodester.com/php/14952/news247-news-magazine-php-script.html
# Software Link: https://www.sourcecodester.com/sites/default/files/download/oretnom23/news247.zip
# Tested on: Kali Linux, Apache, Mysql
# Vendor: 255programmer
# Version: v1.0
# CVE [Reserved] : CVE-2021-41731
# Exploit Description:
# News247 - News Magazine (CMS) v1.0 suffers from a stored cross site
scripting (XSS) Vulnerability. Admin can publish blogs under various
categories. When creating new "blog category", if admin give malicious
payload like *""><img src=x onerror=alert(document.cookie)>* into the
category name field and publish that blog. Then it allows you to execute
arbitrary JavaScript in the context of the whole user who visited that
page. It can be abused to steal session cookies, perform requests in the
name of the victim or for phishing attacks.
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Sep 2022 00:00Current
5.5Medium risk
Vulners AI Score5.5
EPSS0.00335