Joomla Component com_linksutra Upload / Persistent XSS Vulnerability

====================================================================
Joomla Component com_linksutra Upload / Persistent XSS Vulnerability
====================================================================


AUTHOR : Cur53D aka Kedar Patwary
MAIL : Hyq6xx[at]gmail.com
DATE : 27,june 2010
Blog : www.Cur53D.dlstreet.net
Type : XSS
Greetz : Sid3^effects,*L0rd CrusAd3r*,D34D F0X TH3 BL4CKH4T,D4rk357 And All

 My Friends

####################################################################################
About the Script:
This component and module provides facility to joomla admin to create social

networking site easily.

Vendor:www.linksutra.com
####################################################################################
XSS Vulnerability effects the users profile all fields are vulnerable to XSS.

Go to the site,Register--->edit Profile and insert your script like the below one

">><marquee><h1>Cross Site Script3d By Cur53D</h1><marquee>

Demo:http://demo.linksutra.com/index.php?option=com_linksutra&view=profile&Itemid=28
####################################################################################
Upload Vulnerability:

You can upload your evil scripts as it is without changing the extension from Album

feature,Go and make a new album and upload your evil script in it and search for

your shell.

Demo:http://demo.linksutra.com/index.php?option=com_linksutra&view=album
####################################################################################
#Cur53D



#  0day.today [2018-01-05]  #