Lucene search
K

Mouse Media Script 1.6 0 - Stored XSS Vulnerability

🗓️ 13 Nov 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 12 Views

Mouse Media Script 1.6 0 - Stored XSS Vulnerability. XSS vulnerability allows attackers to inject malicious payloads into image titles and descriptions, affecting visitors and logged-in users

Code

                                                # Exploit Title: Mouse Media Script Stored XSS Vulnerability
# Google Dork: "is your best source of fun." inurl:/view/popular
# Date: 04-10-2014
# Exploit Author: Halil Dalabasmaz
# Version: v1.6
# Software Link: http://codecanyon.net/item/mouse-media-script/7773254
# Software Test Link: http://media.nisgeo.com
# Tested on: Kali Linux & Iceweasel 31.2.0
# Sample Payload: "><script>alert(document.cookie);</script>
 
# Attack Description:    Login to system and upload any of your image. When
uploading the image you need to enter the XSS payload to "Title" or
"Description" inputs. And then you can visit thıs home page to check the
uploaded payload. All these uploaded image and payload were completed
succesfully then all visitors and logged users will be affected by this
vulnerability.
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation